CVE-2026-68210: media: stm32: dcmi: unregister notifier on probe failure
In the Linux kernel, the following vulnerability has been resolved:
media: stm32: dcmi: unregister notifier on probe failure
dcmigraphinit() registers the async notifier before dcmiprobe() toggles the reset line. If resetcontrolassert() or resetcontroldeassert() fails afterwards, probe returns through errcleanup and the driver core will not call dcmiremove().
Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules.
[hverkuil: added Fixes tag]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68210?
The severity of CVE-2026-68210 is rated as 10, indicating a critical risk.
What systems are affected by CVE-2026-68210?
CVE-2026-68210 affects the Linux kernel, specifically in the media subsystem related to STM32 DCMI.
How do I fix CVE-2026-68210?
To fix CVE-2026-68210, update to the patched version of the Linux kernel that addresses the vulnerability.
What is the impact of CVE-2026-68210 if exploited?
If exploited, CVE-2026-68210 may lead to system instability or a denial of service during the device probe phase.
When was CVE-2026-68210 published?
CVE-2026-68210 was published on August 10, 2026.