Answer in brief
CVE-2026-89871 records a Unknown severity vulnerability in media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5cebaac609744414463d1ecc28fdecd26c1b9bc1 <db0f4531aa55cfb0171684ebfffe3ff04b79d5a8 || >=5cebaac609744414463d1ecc28fdecd26c1b9bc1 <0fac63cac6689588da530764ccb6ba55ee8e4d8b || >=5cebaac609744414463d1ecc28fdecd26c1b9bc1 <5c35d380bea60503c4fe0986fe1de6a3263282b3 || >=5cebaac609744414463d1ecc28fdecd26c1b9bc1 <3d1b10d81fe54852ed953f4129577b733bbd6907 || >=5cebaac609744414463d1ecc28fdecd26c1b9bc1 <968c5213e34c48d35febdfd09cf3dc58ad039140 || >=5cebaac609744414463d1ecc28fdecd26c1b9bc1 <52fd9d80c0cea7bf09e7ee36cad316e5c39b7fe6 || >=5cebaac609744414463d1ecc28fdecd26c1b9bc1 <0e7f2cd72a4f9268ee09a13b13f3339e7cc71557 || >=5cebaac609744414463d1ecc28fdecd26c1b9bc1 <76e379754ba618989f6215be608d5c04774a611d | db0f4531aa55cfb0171684ebfffe3ff04b79d5a8, 0fac63cac6689588da530764ccb6ba55ee8e4d8b, 5c35d380bea60503c4fe0986fe1de6a3263282b3, 3d1b10d81fe54852ed953f4129577b733bbd6907, 968c5213e34c48d35febdfd09cf3dc58ad039140, 52fd9d80c0cea7bf09e7ee36cad316e5c39b7fe6, 0e7f2cd72a4f9268ee09a13b13f3339e7cc71557, 76e379754ba618989f6215be608d5c04774a611d |
| Linux/Linuxgeneric | 4.18 | Not reported |
Published upstream
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 16, 2026
In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure kthread_run() returns an ERR_PTR on failure, not NULL. When start_streaming() fails, data->kthread_vid_cap is left holding this error pointer instead of being cleared. This causes two subsequent bugs: 1. A future call to start_streaming() sees a non-NULL kthread_vid_cap and returns 0 (success) immediately, without actually starting the capture thread. 2. A call to stop_streaming() checks 'kthread_vid_cap == NULL' which is false for an error pointer, and proceeds to call kthread_stop() on the error pointer, leading to a kernel crash. Fix this by resetting kthread_vid_cap to NULL on failure before jumping to the error path.
Quoted source text, attributed separately from HOL analysis.