CVE-2026-68220 media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Add missing v4l2subdevcleanup in crossbar and pipe Both mxcisicrossbarinit and mxcisipipeinit call v4l2subdevinitfinalize which allocates the subdev active state, but neither mxcisicrossbarcleanup nor...

EUVD-2026-55321

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Add missing v4l2subdevcleanup in crossbar and pipe Both mxcisicrossbarinit and mxcisipipeinit call v4l2subdevinitfinalize which allocates the subdev active state, but neither mxcisicrossbarcleanup nor...

CVE-2026-68207 media: ti: vpe: unwind v4l2 device registration on probe error

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeeded. Probe failures do not call the driver's remove callback, so the v4...

CVE-2026-68207

The CVE concerns the Linux kernel TI VPE media driver: if vpe_top is missing, vpe_probe() returns -ENODEV after v4l2_device_register(), and probe failures do not call the driver’s remove callback, leaving the v4l2 device registered. The fix routes the failure through the existing v4l2_device_unre...

CVE-2026-68206 media: v4l2-ctrls: validate HEVC active reference counts

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...

CVE-2026-68206 media: v4l2-ctrls: validate HEVC active reference counts

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...

CVE-2026-68205 media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2asyncregistersubdevsensor The v4l2 helper v4l2asyncregistersubdevsensor calls v4l2asyncregistersubdev, which is a macro that expands to v4l2asyncregistersubdevsd,THISMODULE...

Linux Distros Unpatched Vulnerability : CVE-2026-68206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verif...

PT-2026-69615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the radio-si476x media component where the si476x radio probe function registers radio-v4l2dev before allocating V4L2 controls and registering the video device. If the...

PT-2026-69628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wave5 media component where a buffer may be returned to userspace via the v4l2 m2m buf done function before it is removed from the m2m ready queue. This allows...

CVE-2026-68223: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: Fix memory leak in error path of vdecopen The vdecopen function previously jumped directly to errm2mrelease when vdecinitctrls failed, skipping release of the m2m context. This caused a resource leak. Fix it b...

PT-2026-69605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the v4l2-fwnode component where the helper function v4l2 async register subdev sensor incorrectly overwrites the subdevice owner. This occurs because the function call...

CVE-2026-68205: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2asyncregistersubdevsensor The v4l2 helper v4l2asyncregistersubdevsensor calls v4l2asyncregistersubdev, which is a macro that expands to v4l2asyncregistersubdevsd,THISMODULE...

CVE-2026-68206: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...

PT-2026-69606

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description HEVC slice parameters are shared stateless V4L2 controls. The common validation path fails to verify the active L0/L1 reference counts before they are consumed by driver-specific code...

PT-2026-69610

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the stm32 dcmi media component where the dcmi graph init function registers an async notifier before the dcmi probe function toggles the reset line. If the reset contr...

PT-2026-69607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the vpe probe function returns -ENODEV when the vpe top resource is missing, even after v4l2 device register has successfully completed. Because...

PT-2026-69620

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the imx8-isi driver during module removal. The functions mxc isi crossbar init and mxc isi pipe init utilize v4l2 subdev init finalize to allocate the subdev acti...

Linux Distros Unpatched Vulnerability : CVE-2026-68204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: vivid: check for vb2isbusy when toggling caps The vividupdateformatcap/out functions must only be called if the capture/output queue are not busy. But fo...

Linux Distros Unpatched Vulnerability : CVE-2026-68207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeede...