CVE-2026-43312

media: i2c: ov5647: Initialize subdev before controls

published May 8, 2026

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: i2c: ov5647: Initialize subdev before controls

In ov5647_init_controls() we call v4l2_get_subdevdata, but it is

initialized by v4l2_i2c_subdev_init() in the probe, which currently

happens after init_controls(). This can result in a segfault if the

error condition is hit, and we try to access i2c_client, so fix the

order.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2026-05-08T13:11Z
EPSS history
Timeline
  • 08 MAY 13:11Z
    media: i2c: ov5647: Initialize subdev before controls
    cvelistv5