CVE-2026-46313: media: intel/ipu6: fix error pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
media: intel/ipu6: fix error pointer dereference
In a error path isp->psys is confirmed to be an error pointer not NULL so this condition is true and the error pointer is dereferenced. So isp-psys should be set to NULL before going to outipu6busdeldevices.
Detected by Smatch: drivers/media/pci/intel/ipu6/ipu6.c:690 ipu6pciprobe() error: 'isp->psys' dereferencing possible ERRPTR()
[Sakari Ailus: Fix commit message.]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In ipu6_pci_probe() at drivers/media/pci/intel/ipu6/ipu6.c (around line 690), ensure isp->psys is set to NULL before jumping to out_ipu6_bus_del_devices so the error pointer is not dereferenced in the error path.
Linux kernel (drivers/media/pci/intel/ipu6/ipu6.c) isp->psys = NULL
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46313?
CVE-2026-46313 has a risk rating of 23, indicating a significant vulnerability in the Linux kernel.
How do I fix CVE-2026-46313?
To fix CVE-2026-46313, update your Linux kernel to the latest patched version that addresses this vulnerability.
What components are affected by CVE-2026-46313?
CVE-2026-46313 affects the media/intel/ipu6 driver in the Linux kernel.
What actions should be taken if my system is vulnerable to CVE-2026-46313?
If your system is vulnerable to CVE-2026-46313, it is crucial to apply the security patch as soon as possible to prevent exploitation.
What type of vulnerability is CVE-2026-46313?
CVE-2026-46313 is classified as an error pointer dereference vulnerability in the Linux kernel.