CVE-2026-46239

MEDIUM EPSS 1.3%
Published May 28, 20261mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 28, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl Three control cases (AUTOGAIN, EXPOSURE_AUTO, ANALOGUE_GAIN) directly return without calling pm_runtime_put(), causing runtime PM reference count leaks. Change these cases from 'return' to 'ret = ... break' pattern to ensure pm_runtime_put() is always called before function exit.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
1.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 1

VendorProductVersionRange
linuxlinux_kernel*≥7.0  –  <7.0.9

References 2

  • git.kernel.org https://git.kernel.org/stable/c/6b03ecf75bda5900b8e661eb75656f631b598bc2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f11ae9c04f8368a3b5a0280ef595198dace1c983
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/6b03ecf75bda5900b8e661eb75656f631b598bc2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f11ae9c04f8368a3b5a0280ef595198dace1c983
    Patch