AUGUST 22, 2026
Live Feed
Back to database
Case File

CVE-2026-68224

UNKNOWN · CVSS N/A EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's media subsystem, specifically in the mali-c55 driver, where a failure to properly check for error pointers can lead to dereferencing an invalid pointer. This oversight could result in potential crashes or undefined behavior in systems utilizing this driver. Organizations using affected Linux kernel versions, particularly those relying on the mali-c55 media driver, should prioritize applying the fix to mitigate stability and reliability risks.

CVE
CVE-2026-68224
Severity
UNKNOWN
CVSS
N/A
EPSS
0.20%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERR_PTR in enable_streams The media_pad_remote_pad_unique() function returns either a valid pointer or an ERR_PTR() on failure (-ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found). The return value was assigned directly to isp->remote_src and dereferenced in the next line without checking for errors, which could lead to an ERR_PTR dereference. Add proper error checking with IS_ERR() before dereferencing the pointer. Also set isp->remote_src to NULL on error to maintain consistency with other error paths in the function.