CVE-2026-68215: media: radio-si476x: Unregister v4l2_device on probe failure
In the Linux kernel, the following vulnerability has been resolved:
media: radio-si476x: Unregister v4l2device on probe failure
si476xradioprobe() registers radio->v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns through the exit label after freeing only the control handler.
A failed probe does not call si476xradioremove(), so the v4l2deviceunregister() there is not reached. This leaves the parent device reference taken by v4l2deviceregister() behind on the error path.
Unregister the V4L2 device in the probe error path after freeing the controls.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68215?
CVE-2026-68215 has a risk rating of 12, indicating a high vulnerability severity.
How do I fix CVE-2026-68215?
To mitigate CVE-2026-68215, ensure you are using an updated version of the Linux kernel where this vulnerability has been resolved.
What is the impact of CVE-2026-68215?
The impact of CVE-2026-68215 could lead to denial of service due to improper handling during the device probe in the Linux kernel.
Which component is affected by CVE-2026-68215?
CVE-2026-68215 affects the radio-si476x driver component in the Linux kernel.
When was CVE-2026-68215 published?
CVE-2026-68215 was published on August 10, 2026.