{"id":"CVE-2026-93101","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-async: Unregister sub-device if asc_list is empty\n\nWhen my em28xx USB device that uses the i2c tvp5150 driver is\ndisconnected, it crashes.\n\nThe cause is tha…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-async: Unregister sub-device if asc_list is empty\n\nWhen my em28xx USB device that uses the i2c tvp5150 driver is\ndisconnected, it crashes.\n\nThe cause is tha…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 28a1295795d85a25f2e7dd391c43969e95fcb341 < c7201bd08cad791858337e33ffcd90d8ae4147c2","Linux >= 28a1295795d85a25f2e7dd391c43969e95fcb341 < e190320cebe921f99973c984ac53f317061a011f","Linux >= 28a1295795d85a25f2e7dd391c43969e95fcb341 < 65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32","Linux >= 28a1295795d85a25f2e7dd391c43969e95fcb341 < 9fb74dce5c650cb23b60f6ba0ffcd5024e948a75","Linux >= 28a1295795d85a25f2e7dd391c43969e95fcb341 < 4e72f13d58c4245c177a9d5f54579345554f354d","Linux 6.6"],"published":"2026-09-17","updated":"2026-09-17","sourceUpdated":"2026-09-17T17:18:04.357","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93101","references":[{"url":"https://git.kernel.org/stable/c/4e72f13d58c4245c177a9d5f54579345554f354d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9fb74dce5c650cb23b60f6ba0ffcd5024e948a75","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/c7201bd08cad791858337e33ffcd90d8ae4147c2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e190320cebe921f99973c984ac53f317061a011f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-17T16:21:47.756Z","epss":0.00168,"epssPercentile":0.06492,"slug":"CVE-2026-93101","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-async: Unregister sub-device if asc_list is empty\n\nWhen my em28xx USB device that uses the i2c tvp5150 driver is\ndisconnected, it crashes.\n\nThe cause is that the tvp5150 i2c module uses v4l2_async, but\nthe em28xx driver does not since it predates v4l2_async.\n\nIn that corner case sd->asc_list is empty, so\nv4l2_async_unregister_subdev() never calls v4l2_device_unregister_subdev().\n\nModify the code so that, if sd->asc_list is empty,\nv4l2_device_unregister_subdev() is still called.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}