Strix
64.9K

CVE-2026-68210

HIGHCVSS 7.8/10EPSS 0.18%

Last modified

CVE-2026-68210 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove(). Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules. [hverkuil: added Fixes tag]. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove(). Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules. [hverkuil: added Fixes tag]

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.18%

7.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d079f94c90469f413920b9f2b201537fac2ceb06, < 222a9301b086852b90d3b092fef436c3f4e927c4; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 37ff63c5d7119cbc5c6bacdcc658add6008a8e1f; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 6c6f22b7e6cbc4e8c1e359fc9b190419391c3db7; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 931abe1deb65b919d23fa203d7f6d6fbd4fccd8e; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 4b7ee504969e074725e439c949f2483e5fa5572a; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 084973ebd67b28f0945c5d45408f86c58b540110
LinuxLinux4.20

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68210?
In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove(). Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules. [hverkuil: added Fixes tag]
How severe is CVE-2026-68210?
CVE-2026-68210 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2026-68210?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68210?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST