In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2_video_unregister_device on driver removal The driver… (CVE-2026-98915)

The Linux kernel media video-i2c driver previously used video_unregister_device() during driver removal, which was incorrect because the driver uses vb2_fop_release() as its file release operation. The vulnerability was resolved by switching to vb2_video_unregister_device(), ensuring the vb2 queue is properly disconnected before the video device is unregistered. This correction prevents potential issues related to improper device unregistration.

The vulnerability relates to improper cleanup during driver removal, which could lead to resource mismanagement or instability in the media subsystem. No specific exploitation details or impacts such as privilege escalation or code execution are described.

A fix is available that replaces video_unregister_device() with vb2_video_unregister_device() during driver removal in the media video-i2c driver. Users should update to the patched Linux kernel version containing this correction. Patch status is not explicitly confirmed; check the vendor advisory for current remediation guidance.