CVE-2026-20486

In the provided documents, CVE-2026-20486 affects the imgsensor component. The root cause is an incorrect error handling in imgsensor that can trigger an application crash, potentially enabling local escalation of privilege for an attacker already holding System privileges. Exploitation does not ...

CVE-2026-46239

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Fix runtime PM refcount leak in sctrl Three control cases AUTOGAIN, EXPOSUREAUTO, ANALOGUEGAIN directly return without calling pmruntimeput, causing runtime PM reference count leaks. Change these cases from...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fixed streaming cleanup upon release. The current implementation mxcisivideocleanupstreaming in mxcisivideorelease. This can lead to situations where any release call such as from a simple v4l2-ctl -l may...

CVE-2025-68175

CVE-2025-68175 affects the Linux kernel driver for i.MX8 iISI (NXP) where mxc_isi_video_release() unconditionally calls mxc_isi_video_cleanup_streaming(), risking release of an active streaming queue while a capture is in progress. The fix moves streaming preparation and cleanup to the vb2 framew...

OESA-2024-1483 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: i2c: img-scb: fix reference leak when pmruntimegetsync fails The PM reference count is not expected to be incremented on return in functions imgi2cxfer and...

MediaTek 芯片缓冲区错误漏洞

MediaTek isp is a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek isp, which stems from a lack of boundary checking, leading to out-of-bounds writes...

CVE-2022-21791

In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06478059; Issue ID: ALPS06478059...