CVE record · CVE-2026-89741

Revert "media: v4l2-dev: fix error handling in __video_register_device()"

CVSS 7.8 HighEPSS 0.0017 · 6th percentile

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected e5c8e62ae551e0ad2e15412aa0c57c2856d59677 to before 8b998c171ed875e402e1fd1c5cd619e4ca05e9c1 git
  • affected 8b451a9a46f2bfc510e6d5c2492df91647586184 to before 3de14b4f681a1b3c6d375d98d9d37a55ebb85349 git
  • affected b6be1f5633eae200af2527e9eeb7f51be5739b0f to before 8027f82c0f5474ed72448e160ee9778051fa1f49 git
  • affected ae7b143e05b36fc69d6571751855946cc45064c6 to before 2ac009a65d2385e9f0799eaf9d9694a29153a161 git
  • affected 2429bb9fad88c8fa84c4956b0a21cf5afe5e92b7 to before 712ca1cf756de2557a116e0df55791bac0c9f99e git
  • affected 2a934fdb01db6458288fc9386d3d8ceba6dd551a to before aad08b5f67d2a8116e1a00bce2611c1513b10bce git
  • affected 2a934fdb01db6458288fc9386d3d8ceba6dd551a to before ce792b94e03882108019ba996c1a7c4d4e09be2c git
  • affected 2a934fdb01db6458288fc9386d3d8ceba6dd551a to before e7600f5cee5de14065f950807931d6e6d40fb2d7 git
  • affected ee141706e701356dda41c6fed9ee18bf427c28e3 git
  • affected 4451412739ed33a49b34624299394ee575116d0c git
  • affected 5.10.239 to before 5.10.270 semver
  • affected 5.15.186 to before 5.15.221 semver
  • and 5 more
Other versions: unaffected
Linux Linux
  • affected 6.16
  • unaffected before 6.16 semver
  • unaffected 5.10.270 to 5.10.*, inclusive semver
  • unaffected 5.15.221 to 5.15.*, inclusive semver
  • unaffected 6.1.188 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.109 to 6.12.*, inclusive semver
  • unaffected 6.18.50 to 6.18.*, inclusive semver
  • unaffected 7.2.4 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-89741
CNA
Linux
Published
11 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.8 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0017, the 6th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.