The vulnerability stems from the Linux kernel media subsystem, where the gc2235 driver mishandles error paths during probe. If media_entity_pads_init() fails, the driver calls gc2235_remove(), which frees the device structure and then continues to atomisp_register_i2c_module(), leading to a use‑after‑free. If atomisp_register_i2c_module() fails, resources allocated prior to the failure are left allocated, causing a memory leak. Additionally, gc2235_remove() may attempt to clean up entities that were never initialized, resulting in further undefined behavior.

The flaw resides in the Linux kernel’s media atomisp device driver for the GC2235 sensor. Any Linux system running a kernel that incorporates the unpatched gc2235 module is susceptible. The issue is vendor‑agnostic within the Linux project and applies to all builds that include this driver unchanged. Affected version information is not supplied.

The EPSS score is < 1% and CVSS is not supplied, so specific risk figures are not available. The description indicates that a failure in media_entity_pads_init() or atomisp_register_i2c_module() leads to a use‑after‑free or memory leak in the gc2235 driver. This could allow kernel memory corruption if an attacker can trigger the failure path. The flaw is not listed in KEV, and no public exploit is reported. Overall, the risk remains uncertain but potentially high if the conditions can be achieved.