Bug 2467186 (CVE-2026-43246) - CVE-2026-43246 kernel: media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
Summary: CVE-2026-43246 kernel: media: i2c/tw9906: Fix potential memory leak in tw9906...
Keywords:
Status: NEW
Alias: CVE-2026-43246
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-05-06 13:09 UTC by OSIDB Bzimport
Modified: 2026-05-25 07:57 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-05-06 13:09:29 UTC 
In the Linux kernel, the following vulnerability has been resolved:

media: i2c/tw9906: Fix potential memory leak in tw9906_probe()

In one of the error paths in tw9906_probe(), the memory allocated in
v4l2_ctrl_handler_init() and v4l2_ctrl_new_std() is not freed. Fix that
by calling v4l2_ctrl_handler_free() on the handler in that error path.
Comment 1 Keith Grant 2026-05-06 23:00:59 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026050601-CVE-2026-43246-ec1c@gregkh/T
Comment 2 Helen Grace 2026-05-25 07:57:20 UTC 
(In reply to OSIDB Bzimport from comment #0)
> In the Linux kernel, the following vulnerability has been resolved:
> 
> media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
> https://wackygame.org/ 
> In one of the error paths in tw9906_probe(), the memory allocated in
> v4l2_ctrl_handler_init() and v4l2_ctrl_new_std() is not freed. Fix that
> by calling v4l2_ctrl_handler_free() on the handler in that error path.

This is one of those tiny-looking fixes that quietly improves long-term system stability.
Note You need to log in before you can comment on or make changes to this bug.