IT

Tracker / CVE-2026-43312

CVE-2026-43312

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Initialize subdev before controls In ov5647_init_controls() we call v4l2_get_subdevdata, but it is initialized by v4l2_i2c_subdev_init() in the probe, which currently happens after init_controls(). This can result in a segfault if the error condition is hit, and we try to access i2c_client, so fix the order.

Affected products and versions

linux linux_kernel · 5.12 → 5.15.202
linux linux_kernel · 5.16 → 6.1.165
linux linux_kernel · 6.13 → 6.18.16
linux linux_kernel · 6.19 → 6.19.6
linux linux_kernel · 6.2 → 6.6.128
linux linux_kernel · 6.7 → 6.12.75

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References