AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-68210

HIGH · CVSS 7.8 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's media subsystem, specifically the STM32 DCMI driver, where an async notifier is not properly unregistered during probe failures. This oversight can lead to resource leaks and potential instability in the system. Linux system administrators and developers working with the STM32 platform should prioritize applying the fix to ensure system reliability and compliance with V4L2 async notifier lifetime rules.

CVE
CVE-2026-68210
Severity
HIGH
CVSS
7.8
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove(). Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules. [hverkuil: added Fixes tag]