CVE-2026-68210
Published: August 12, 2026Last modified: August 12, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove(). Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules. [hverkuil: added Fixes tag]
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Vulnerable (6.1.177-r0) |
| 25 LTS | linux-lts | Vulnerable (6.12.95-r0) | |
| Stream | linux-lts | Fixed (6.18.43-r0) |
References
- https://git.kernel.org/stable/c/084973ebd67b28f0945c5d45408f86c58b540110
- https://git.kernel.org/stable/c/37ff63c5d7119cbc5c6bacdcc658add6008a8e1f
- https://git.kernel.org/stable/c/4b7ee504969e074725e439c949f2483e5fa5572a
- https://git.kernel.org/stable/c/6c6f22b7e6cbc4e8c1e359fc9b190419391c3db7
- https://git.kernel.org/stable/c/931abe1deb65b919d23fa203d7f6d6fbd4fccd8e