{"id":"CVE-2026-72484","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-72484","generatedAt":"2026-10-28T02:20:27.833Z","title":"In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure comp_register_videodev() allocates a video_device with video_device_alloc() and releases it if video_register_device()…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: most: video: avoid double free on video register failure\n\ncomp_register_videodev() allocates a video_device with\nvideo_device_alloc() and releases it if video_register_device() fails.\n\nThis can double free the video_device when __video_register_device()\nreaches device_register() and that call fails:\n\n  video_register_device()\n    -> __video_register_device()\n       -> device_register() fails\n          -> put_device(&vdev->dev)\n             -> v4l2_device_release()\n                -> vdev->release(vdev)\n                   -> video_device_release(vdev)\n\n  comp_register_videodev()\n    -> video_device_release(mdev->vdev)\n\nUse video_device_release_empty() while registering the device so that\nregistration failure paths do not free mdev->vdev through vdev->release().\ncomp_register_videodev() then releases mdev->vdev exactly once on failure.\nRestore video_device_release() after successful registration so the\nregistered device keeps its normal lifetime handling.\n\nThis issue was found by a static analysis tool I am developing.","published":"2026-08-15T06:22:23.000Z","lastModified":"2026-08-17T06:19:17.000Z","status":"Received","sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","cvss":null,"cwe":[],"affected":[],"epss":{"score":0.0022,"percentile":0.12377,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"unknown","text":"Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published."},"changes":[],"references":[{"url":"https://git.kernel.org/stable/c/009d58b73500d0b49f6ae3833f8afcb0ebd9ddbb","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/43078449ad6236d839e4d707954d2e36b10a6706","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/430ad4ea06a0767fb44a08e2212ceb3a996607ee","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/46ea51f5b2ee1a3b40c05b7c750cbc5cabe94062","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4928096212b78262dbbeab3b3abf2352278ce22d","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7cb1c5b32a2bfde961fff8d5204526b609bcb30a","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7fc162453cfb7b8e93edb16287a84ba0130cac38","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/80ed79787da3311f76b4d71d0ce7ab992a9e134d","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-72484","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}