Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-98915

Fixed in a distro release EPSS <1%

In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2_video_unregister_device on driver removal The driver uses vb2_fop_release() as its file release operation, so vb2_video_unregister_device() should be used instead of video_unregister_device() during driver removal. This ensures that the vb2 queue is properly disconnected before the video device is unregistered.

Published 2026-10-23 · CVE record · OSV

Products: Linux

Distro releases

ReleasePackageFixed in
Debian 12linux6.1.190-1
Debian 13linux6.12.111-1
Debian 14linux7.2.6-1