Linux Kernel Memory Leak in i2c/tw9906 Driver
CVE-2026-43246 Published on May 6, 2026
media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
In the Linux kernel, the following vulnerability has been resolved:
media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
In one of the error paths in tw9906_probe(), the memory allocated in
v4l2_ctrl_handler_init() and v4l2_ctrl_new_std() is not freed. Fix that
by calling v4l2_ctrl_handler_free() on the handler in that error path.
Products Associated with CVE-2026-43246
stack.watch emails you whenever new vulnerabilities are published in Linux Kernel or Canonical Ubuntu Linux. Just hit a watch button to start following.
Affected Versions
Linux:- Version a000e9a02b5885b1b69f691c80e346d102f94a88 and below e9a490937942f18205dac7b6b192975ef1369ae1 is affected.
- Version a000e9a02b5885b1b69f691c80e346d102f94a88 and below 9548a8bbf511a252a9848f96220c6b95c9a3b918 is affected.
- Version a000e9a02b5885b1b69f691c80e346d102f94a88 and below 0c33338514d8246280533a77091e6b6ee548c606 is affected.
- Version a000e9a02b5885b1b69f691c80e346d102f94a88 and below ccb92def042a3636ed47f25a30bd553788e5191e is affected.
- Version a000e9a02b5885b1b69f691c80e346d102f94a88 and below fb09d8b80046216646f1a344410cfa9cfa6c6c7c is affected.
- Version a000e9a02b5885b1b69f691c80e346d102f94a88 and below 377a7756914364d72550fc86ca0f404ef1d96141 is affected.
- Version a000e9a02b5885b1b69f691c80e346d102f94a88 and below 59420d5d9c46b084e21f9ea6ce79fc79ae9e414c is affected.
- Version a000e9a02b5885b1b69f691c80e346d102f94a88 and below cad237b6c875fbee5d353a2b289e98d240d17ec8 is affected.
- Version 3.10 is affected.
- Before 3.10 is unaffected.
- Version 5.10.252, <= 5.10.* is unaffected.
- Version 5.15.202, <= 5.15.* is unaffected.
- Version 6.1.165, <= 6.1.* is unaffected.
- Version 6.6.128, <= 6.6.* is unaffected.
- Version 6.12.75, <= 6.12.* is unaffected.
- Version 6.18.16, <= 6.18.* is unaffected.
- Version 6.19.6, <= 6.19.* is unaffected.
- Version 7.0, <= * is unaffected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.