This vulnerability arises from the Linux kernel media driver incorrectly using the generic video_unregister_device function when removing a driver, instead of the specialized vb2_video_unregister_device. The oversight means the vb2 queue is not properly disconnected before the video device is unregistered, which can lead to resource leaks and an inconsistent kernel state. A destabilized kernel can encounter crashes or degraded performance, presenting a significant denial‑of‑service risk.

Affected systems are all Linux kernel builds that include the media subsystem with the video-i2c driver. No specific kernel versions or distributions are listed, so any kernel that loads this driver may be vulnerable. The vulnerability is present before any official patch has been applied.

The vulnerability does not have a published CVSS score or EPSS assessment, and it is not listed in the CISA KEV catalog. The likely attack vector is local: an attacker with the ability to unload the kernel module could exploit the improper cleanup. While the potential impact is severe due to possible kernel panics, the lack of an exploitation exploit in readily available tools suggests a moderate current threat level.