{"id":"CVE-2026-93101","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-async: Unregister sub-device if asc_list is empty\n\nWhen my em28xx USB device that uses the i2c tvp5150 driver is\ndisconnected, it crashes.\n\nThe cause is tha…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-async: Unregister sub-device if asc_list is empty\n\nWhen my em28xx USB device that uses the i2c tvp5150 driver is\ndisconnected, it crashes.\n\nThe cause is tha…","severity":"medium","vendor":"Linux","product":"Linux","affected":["Linux >= 28a1295795d85a25f2e7dd391c43969e95fcb341 < c7201bd08cad791858337e33ffcd90d8ae4147c2","Linux >= 28a1295795d85a25f2e7dd391c43969e95fcb341 < e190320cebe921f99973c984ac53f317061a011f","Linux >= 28a1295795d85a25f2e7dd391c43969e95fcb341 < 65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32","Linux >= 28a1295795d85a25f2e7dd391c43969e95fcb341 < 9fb74dce5c650cb23b60f6ba0ffcd5024e948a75","Linux >= 28a1295795d85a25f2e7dd391c43969e95fcb341 < 4e72f13d58c4245c177a9d5f54579345554f354d","Linux 6.6"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:18:04.357","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93101","references":[{"url":"https://git.kernel.org/stable/c/4e72f13d58c4245c177a9d5f54579345554f354d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9fb74dce5c650cb23b60f6ba0ffcd5024e948a75","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/c7201bd08cad791858337e33ffcd90d8ae4147c2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e190320cebe921f99973c984ac53f317061a011f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93101.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-93101"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2536566"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93101"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93101"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93101.mbox"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ingestedAt":"2026-09-17T16:21:47.756Z","epss":0.00168,"epssPercentile":0.06054,"cvss":5.8,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cvssSource":"vendor","cwe":["CWE-772"],"slug":"CVE-2026-93101","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-async: Unregister sub-device if asc_list is empty\n\nWhen my em28xx USB device that uses the i2c tvp5150 driver is\ndisconnected, it crashes.\n\nThe cause is that the tvp5150 i2c module uses v4l2_async, but\nthe em28xx driver does not since it predates v4l2_async.\n\nIn that corner case sd->asc_list is empty, so\nv4l2_async_unregister_subdev() never calls v4l2_device_unregister_subdev().\n\nModify the code so that, if sd->asc_list is empty,\nv4l2_device_unregister_subdev() is still called.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10 · no fix planned: Red Hat Enterprise Linux 10 · updated 2026-10-05 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93101.json)","depth":"sunlit","depthScore":32,"depthScoreParts":{"impact":31.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":216372,"id":"CVE-2026-93101","ts":1791274117470,"field":"cvss","old":null,"new":"5.8"},{"seq":216371,"id":"CVE-2026-93101","ts":1791274117470,"field":"severity","old":"none","new":"medium"}]}