CVE-2026-43312
MediumSummary
A vulnerability has been identified in the Linux kernel related to the initialization of subdevice before setting controls in the ov5647 module. The issue arises because the v4l2_get_subdevdata function is called before its initialization, which may lead to malfunction.
Risk Assessment
This vulnerability may cause errors in the operation of devices using this module, potentially affecting system stability and data security.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been fixed to ensure proper operation and system security.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Initialize subdev before controls In ov5647_init_controls() we call v4l2_get_subdevdata, but it is initialized by v4l2_i2c_subdev_init() in the probe, which currently happens after init_controls(). This can res