AUGUST 22, 2026
Live Feed
Back to database
Case File

CVE-2026-68221

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of memory in the nuvoton NPCM video driver, specifically in the `npcm_video_probe()` and `npcm_video_remove()` functions, which can lead to memory leaks on probe errors and during normal unbinding. This can result in increased memory consumption and potential system instability over time. Organizations utilizing affected Linux kernel versions, particularly those deploying systems with the nuvoton NPCM video driver, should prioritize addressing this issue to maintain system performance and reliability.

CVE
CVE-2026-68221
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcm_video_probe() allocates the npcm_video structure with kzalloc_obj() but never frees it on any probe error path or in npcm_video_remove(), leaking the allocation on every failed probe and every normal unbind. Additionally, when npcm_video_setup_video() fails, the reserved memory association established by of_reserved_mem_device_init() in npcm_video_init() is not released, leaking the rmem_assigned_device entry on the global list. Fix both by adding kfree(video) to all probe error paths and to npcm_video_remove(), and adding the missing of_reserved_mem_device_release() call when npcm_video_setup_video() fails.