Medium 5.5Published Jul 19, 2026

CVE-2026-53379media: i2c: ov8856: free control handler on error in ov8856_init_controls()

Updated under an hour ago (Oct 26, 2026, 3:50 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error in ov8856_init_controls() The control handler wasn't freed if adding controls failed, add an error exit label and convert the existing error return to use it.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jul 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 879347f0c258cffe27b9e28bd4f1f55fc019f857 before c13721040a566d832ee8a20ecf04b7ef288a1525; from 879347f0c258cffe27b9e28bd4f1f55fc019f857 before d1b3811c6b0f67fb7f0acfe09bf8244aa8b12465; from 879347f0c258cffe27b9e28bd4f1f55fc019f857 before fd10fb4c33bdc9c25c9b9d5e7e39f635e34c44a3; from 879347f0c258cffe27b9e28bd4f1f55fc019f857 before ba9e9274c4ecfc039c45752dd6055137eaa5f08e; from 879347f0c258cffe27b9e28bd4f1f55fc019f857 before 791598484fd558bb426ef5e051effa5c227d5390; from 879347f0c258cffe27b9e28bd4f1f55fc019f857 before f727e3251ceee91f3d6e6d87e323aaf070f0de8e; from 879347f0c258cffe27b9e28bd4f1f55fc019f857 before f75e160745663ce9b13362ae6e90bd439c58df69	CNA record
linux linux_kernel linux:linux_kernel	from 5.1 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.90; from 6.13 before 6.18.32; from 6.19 before 7.0.9	NVD

References

https://git.kernel.org/stable/c/c13721040a566d832ee8a20ecf04b7ef288a1525patch
https://git.kernel.org/stable/c/d1b3811c6b0f67fb7f0acfe09bf8244aa8b12465patch
https://git.kernel.org/stable/c/fd10fb4c33bdc9c25c9b9d5e7e39f635e34c44a3patch
https://git.kernel.org/stable/c/ba9e9274c4ecfc039c45752dd6055137eaa5f08epatch
https://git.kernel.org/stable/c/791598484fd558bb426ef5e051effa5c227d5390patch
https://git.kernel.org/stable/c/f727e3251ceee91f3d6e6d87e323aaf070f0de8epatch
https://git.kernel.org/stable/c/f75e160745663ce9b13362ae6e90bd439c58df69patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.