CVE-2026-68207: media: ti: vpe: unwind v4l2 device registration on probe error
In the Linux kernel, the following vulnerability has been resolved:
media: ti: vpe: unwind v4l2 device registration on probe error
If the vpetop resource is missing, vpeprobe() returns -ENODEV after v4l2deviceregister() has succeeded. Probe failures do not call the driver's remove callback, so the v4l2 device remains registered on that error path.
Route that failure through the existing v4l2deviceunregister() unwind label, matching the other errors after v4l2deviceregister().
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68207?
CVE-2026-68207 has a risk score of 12, indicating a critical vulnerability.
What does CVE-2026-68207 affect?
CVE-2026-68207 affects the media subsystem in the Linux kernel, specifically the VPE driver.
How do I fix CVE-2026-68207?
To fix CVE-2026-68207, update the Linux kernel to a version that includes the necessary patches.
What happens if CVE-2026-68207 is exploited?
Exploitation of CVE-2026-68207 may result in unstable device behavior or denial of service due to improper device registration.
When was CVE-2026-68207 published?
CVE-2026-68207 was published on August 10, 2026.