-
CVE-2026-68203
- EPSS 0.21%
- Veröffentlicht 10.08.2026 12:00:22
- Zuletzt bearbeitet 17.08.2026 05:18:22
- Erkennungen
media: vivid: fix cleanup bugs in vivid_init()
In the Linux kernel, the following vulnerability has been resolved:
media: vivid: fix cleanup bugs in vivid_init()
When platform_device_register() fails in vivid_init(), the embedded
struct device in vivid_pdev has already been initialized by
device_initialize(), but the failure path jumps to free_output_strings
without dropping the device reference for the current platform device:
vivid_init()
-> platform_device_register(&vivid_pdev)
-> device_initialize(&vivid_pdev.dev)
-> setup_pdev_dma_masks(&vivid_pdev)
-> platform_device_add(&vivid_pdev)
This leads to a reference leak when platform_device_register() fails.
Fix this by calling platform_device_put() before jumping to the common
cleanup path.
Also, the unreg_driver label incorrectly calls
platform_driver_register() instead of platform_driver_unregister(),
which breaks cleanup when workqueue creation fails after successful
driver registration. Fix that as well.
The reference leak was identified by a static analysis tool I developed
and confirmed by manual review. The incorrect cleanup call was found
during code inspection.Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
f46d740fb0258982f00ffdbddc6486e674edafb5
Version <
4385092a86b94e1f332db35a3766108978c0722f
Status
affected
Version
f46d740fb0258982f00ffdbddc6486e674edafb5
Version <
1349af7f87df57940619f5b87990b799dac9ed8a
Status
affected
Version
f46d740fb0258982f00ffdbddc6486e674edafb5
Version <
6d51ad8f1c50c50d1abcc97fd243179967184c6a
Status
affected
Version
f46d740fb0258982f00ffdbddc6486e674edafb5
Version <
a07c179a92e949172ca52f6d4a13202ea88cd4b7
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
4.1
Status
affected
Version
0
Version <
4.1
Status
unaffected
Version <=
6.12.*
Version
6.12.101
Status
unaffected
Version <=
6.18.*
Version
6.18.42
Status
unaffected
Version <=
7.1.*
Version
7.1.6
Status
unaffected
Version <=
*
Version
7.2
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.112 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/4385092a86b94e1f332db35a3766108978c0722f
https://git.kernel.org/stable/c/1349af7f87df57940619f5b87990b799dac9ed8a
https://git.kernel.org/stable/c/6d51ad8f1c50c50d1abcc97fd243179967184c6a
https://git.kernel.org/stable/c/a07c179a92e949172ca52f6d4a13202ea88cd4b7