CVE-2026-46313: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path isp->psys is confirmed to be an error pointer not NULL so this condition is true and the error pointer is dereferenced. So isp-psys should be set to NULL before going to out_ipu6_bus_del_devices. Detected by Smatch: drivers/media/pci/intel/ipu6/ipu6.c:690 ipu6_pci_probe() error: 'isp->psys' dereferencing possible ERR_PTR() [Sakari Ailus: Fix commit message.]

Affected products

• Linux Linux Kernel: from 6.10, before 6.12.90 (fixed in 6.12.90); from 6.13, before 6.18.32 (fixed in 6.18.32); from 6.19, before 7.0.9 (fixed in 7.0.9)

Published 2026-06-08. Last modified 2026-07-23.