https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 07:16:12 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89871 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure</p> <p>kthread_run() returns an ERR_PTR on failure, not NULL. When start_streaming() fails, data-&gt;kthread_vid_cap is left holding this error pointer instead of being cleared.</p> <p>This causes two subsequent bugs: 1. A future call to start_streaming() sees a non-NULL kthread_vid_cap and returns 0 (success) immediately, without actually starting the capture thread. 2. A call to stop_streaming() checks &#39;kthread_vid_cap == NULL&#39; which is false for an error pointer, and proceeds to call kthread_stop() on the error pointer, leading to a kernel crash.</p> <p>Fix this by resetting kthread_vid_cap to NULL on failure before jumping to the error path.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure</p> <p>kthread_run() returns an ERR_PTR on failure, not NULL. When start_streaming() fails, data-&gt;kthread_vid_cap is left holding this error pointer instead of being cleared.</p> <p>This causes two subsequent bugs: 1. A future call to start_streaming() sees a non-NULL kthread_vid_cap and returns 0 (success) immediately, without actually starting the capture thread. 2. A call to stop_streaming() checks &#39;kthread_vid_cap == NULL&#39; which is false for an error pointer, and proceeds to call kthread_stop() on the error pointer, leading to a kernel crash.</p> <p>Fix this by resetting kthread_vid_cap to NULL on failure before jumping to the error path.</p> https://vulnerability.circl.lu/vuln/cve-2026-89871