CVE-2026-68230: media: amlogic-c3: Add validations for ae and awb config
In the Linux kernel, the following vulnerability has been resolved:
media: amlogic-c3: Add validations for ae and awb config
Avoid invalid memory access if the zonesnum is bigger than zoneweight.
This patch fixes the following smatch errors: drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:111 c3ispparamsawbwt() error: buffer overflow 'cfg->zoneweight' 768 <= u32max drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:111 c3ispparamsawbwt() error: buffer overflow 'cfg->zoneweight' 768 <= u32max drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:227 c3ispparamsaewt() error: buffer overflow 'cfg->zoneweight' 255 <= u32max drivers/media/platform/amlogic/c3/isp/c3-isp-params.c:227 c3ispparamsaewt() error: buffer overflow 'cfg->zoneweight' 255 <= u32max
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Apply the kernel fix that adds validations for ae and awb config zone_weight to avoid buffer overflow when zones_num is bigger than the supported limit (as addressed in c3_isp_params_awb_wt() and c3_isp_params_ae_wt()).
Linux kernel (media: amlogic-c3) Validate ae and awb zone_weight when zones_num is bigger than allowed = Add validations for ae and awb config zone_weight (prevent buffer overflow)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68230?
The severity of CVE-2026-68230 is classified as 27.
What type of vulnerability is CVE-2026-68230?
CVE-2026-68230 is classified as a Buffer Overflow vulnerability.
How do I fix CVE-2026-68230?
To fix CVE-2026-68230, update the Linux kernel with the patch that adds validations for ae and awb configuration.
What is affected by CVE-2026-68230?
CVE-2026-68230 affects the media subsystem in the Amlogic C3 kernel drivers.
When was CVE-2026-68230 published?
CVE-2026-68230 was published on August 10, 2026.