AUGUST 22, 2026
Live Feed
Back to database
Case File

CVE-2026-68207

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's video processing engine (VPE) where a probe error during device registration can lead to a failure in properly unregistering the v4l2 device, leaving it in a registered state despite the absence of the required resource. This could potentially allow for unauthorized access or manipulation of the device, impacting system integrity and security. Linux system administrators and developers working with video devices should prioritize addressing this issue to ensure proper device management and mitigate potential exploitation risks.

CVE
CVE-2026-68207
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpe_top resource is missing, vpe_probe() returns -ENODEV after v4l2_device_register() has succeeded. Probe failures do not call the driver's remove callback, so the v4l2 device remains registered on that error path. Route that failure through the existing v4l2_device_unregister() unwind label, matching the other errors after v4l2_device_register().