# Revert "media: v4l2-dev: fix error handling in \_\_video_register_device()"

CVE record · `CVE-2026-89741`

- **Identifiers:** `CVE-2026-89741`
- **State:** Confirmed
- **Severity:** CVSS 7.8 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 11 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `e5c8e62ae551e0ad2e15412aa0c57c2856d59677 to before 8b998c171ed875e402e1fd1c5cd619e4ca05e9c1` (git)
  - affected: `8b451a9a46f2bfc510e6d5c2492df91647586184 to before 3de14b4f681a1b3c6d375d98d9d37a55ebb85349` (git)
  - affected: `b6be1f5633eae200af2527e9eeb7f51be5739b0f to before 8027f82c0f5474ed72448e160ee9778051fa1f49` (git)
  - affected: `ae7b143e05b36fc69d6571751855946cc45064c6 to before 2ac009a65d2385e9f0799eaf9d9694a29153a161` (git)
  - affected: `2429bb9fad88c8fa84c4956b0a21cf5afe5e92b7 to before 712ca1cf756de2557a116e0df55791bac0c9f99e` (git)
  - affected: `2a934fdb01db6458288fc9386d3d8ceba6dd551a to before aad08b5f67d2a8116e1a00bce2611c1513b10bce` (git)
  - affected: `2a934fdb01db6458288fc9386d3d8ceba6dd551a to before ce792b94e03882108019ba996c1a7c4d4e09be2c` (git)
  - affected: `2a934fdb01db6458288fc9386d3d8ceba6dd551a to before e7600f5cee5de14065f950807931d6e6d40fb2d7` (git)
  - affected: `ee141706e701356dda41c6fed9ee18bf427c28e3` (git)
  - affected: `4451412739ed33a49b34624299394ee575116d0c` (git)
  - affected: `5.10.239 to before 5.10.270` (semver)
  - affected: `5.15.186 to before 5.15.221` (semver)
  - and 5 more
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `6.16`
  - unaffected: `before 6.16` (semver)
  - unaffected: `5.10.270 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.221 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.188 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.109 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.50 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.4 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.8 High, CVSS 3.1: `CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0017, the 6th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-89741](https://www.cve.org/CVERecord?id=CVE-2026-89741)
- [NVD: CVE-2026-89741](https://nvd.nist.gov/vuln/detail/CVE-2026-89741)

### References from the CNA

- <https://git.kernel.org/stable/c/8b998c171ed875e402e1fd1c5cd619e4ca05e9c1>
- <https://git.kernel.org/stable/c/3de14b4f681a1b3c6d375d98d9d37a55ebb85349>
- <https://git.kernel.org/stable/c/8027f82c0f5474ed72448e160ee9778051fa1f49>
- <https://git.kernel.org/stable/c/2ac009a65d2385e9f0799eaf9d9694a29153a161>
- <https://git.kernel.org/stable/c/712ca1cf756de2557a116e0df55791bac0c9f99e>
- <https://git.kernel.org/stable/c/aad08b5f67d2a8116e1a00bce2611c1513b10bce>
- <https://git.kernel.org/stable/c/ce792b94e03882108019ba996c1a7c4d4e09be2c>
- <https://git.kernel.org/stable/c/e7600f5cee5de14065f950807931d6e6d40fb2d7>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-89741>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-89741/>. Everything for agents: <https://agentprime.io/llms.txt>.