CVE-2026-68225: media: i2c: alvium: fix critical pointer access in alvium_ctrl_init
In the Linux kernel, the following vulnerability has been resolved:
media: i2c: alvium: fix critical pointer access in alviumctrlinit
The current implementation of alviumctrlinit creates several controls in function alviumctrlinit and uses the returned pointer without check. That can cause write access over NULL-pointer for several controls. The reworked code checks the pointers before adding flags.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68225?
CVE-2026-68225 is rated with a risk score of 34, indicating a critical vulnerability in the Linux kernel.
How do I fix CVE-2026-68225?
To fix CVE-2026-68225, update your Linux kernel to the latest version where the vulnerability has been addressed.
What systems are affected by CVE-2026-68225?
CVE-2026-68225 affects systems running an unpatched version of the Linux kernel with the alvium driver.
What happens if CVE-2026-68225 is exploited?
Exploitation of CVE-2026-68225 may lead to unauthorized memory access, potentially resulting in system instability or data corruption.
When was CVE-2026-68225 published?
CVE-2026-68225 was published on August 10, 2026.