The vulnerability stems from the Linux kernel media subsystem, where the gc2235 driver mishandles error paths during probe. If media_entity_pads_init() fails, the driver calls gc2235_remove(), which frees the device structure and then continues to atomisp_register_i2c_module(), leading to a use‑after‑free. If atomisp_register_i2c_module() fails, resources allocated prior to the failure are left allocated, causing a memory leak. Additionally, gc2235_remove() may attempt to clean up entities that were never initialized, resulting in further undefined behavior.

The flaw resides in the Linux kernel’s media atomisp device driver for the GC2235 sensor. Any Linux system running a kernel that incorporates the unpatched gc2235 module is susceptible. The issue is vendor‑agnostic within the Linux project and applies to all builds that include this driver unchanged. Affected version information is not supplied.

The EPSS score is < 1% and the CVSS score is 5.5, which signals a moderate severity but a very low probability of exploitation. The flaw leads to a use‑after‑free or memory leak in the gc2235 driver when error paths in probe are triggered. No public exploits are known, and the issue is not in the KEV catalog. Accordingly, the risk to systems with the unpatched driver is low to uncertain.