Strix
26.1K

CVE-2026-68210

Unknown

Last modified

CVE-2026-68210 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove(). Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules. [hverkuil: added Fixes tag].

Description

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove(). Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules. [hverkuil: added Fixes tag]

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d079f94c90469f413920b9f2b201537fac2ceb06, < 37ff63c5d7119cbc5c6bacdcc658add6008a8e1f; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 6c6f22b7e6cbc4e8c1e359fc9b190419391c3db7; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 931abe1deb65b919d23fa203d7f6d6fbd4fccd8e; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 4b7ee504969e074725e439c949f2483e5fa5572a; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 084973ebd67b28f0945c5d45408f86c58b540110
LinuxLinux4.20

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68210?
In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove(). Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules. [hverkuil: added Fixes tag]
How severe is CVE-2026-68210?
Severity scoring for CVE-2026-68210 is pending analysis.
How do I fix CVE-2026-68210?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68210?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST