CVE-2026-46239: media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl
In the Linux kernel, the following vulnerability has been resolved:
media: i2c: ov5647: Fix runtime PM refcount leak in sctrl
Three control cases (AUTOGAIN, EXPOSUREAUTO, ANALOGUEGAIN) directly return without calling pmruntimeput(), causing runtime PM reference count leaks.
Change these cases from 'return' to 'ret = ... break' pattern to ensure pmruntimeput() is always called before function exit.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Change the AUTOGAIN, EXPOSURE_AUTO, and ANALOGUE_GAIN cases in s_ctrl from 'return' to the 'ret = ...; break' pattern so that pm_runtime_put() is always called before the function exits (fixes runtime PM refcount leak).
media: i2c: ov5647 (Linux kernel driver) s_ctrl return handling = use 'ret = ...; break' instead of 'return' in specified control cases
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46239?
CVE-2026-46239 has a severity rating of 12.
How do I fix CVE-2026-46239?
To fix CVE-2026-46239, update to the latest version of the Linux kernel that addresses the runtime PM refcount leak.
What components are affected by CVE-2026-46239?
CVE-2026-46239 affects the i2c driver for the ov5647 camera in the Linux kernel.
Is CVE-2026-46239 remotely exploitable?
CVE-2026-46239 is not categorized as remotely exploitable since it primarily concerns local runtime reference count issues.
What are the implications of not addressing CVE-2026-46239?
Not addressing CVE-2026-46239 could lead to increased resource usage and potential stability issues in the Linux kernel.