-

CVE-2026-68203

media: vivid: fix cleanup bugs in vivid_init()

In the Linux kernel, the following vulnerability has been resolved:

media: vivid: fix cleanup bugs in vivid_init()

When platform_device_register() fails in vivid_init(), the embedded
struct device in vivid_pdev has already been initialized by
device_initialize(), but the failure path jumps to free_output_strings
without dropping the device reference for the current platform device:

  vivid_init()
    -> platform_device_register(&vivid_pdev)
       -> device_initialize(&vivid_pdev.dev)
       -> setup_pdev_dma_masks(&vivid_pdev)
       -> platform_device_add(&vivid_pdev)

This leads to a reference leak when platform_device_register() fails.
Fix this by calling platform_device_put() before jumping to the common
cleanup path.

Also, the unreg_driver label incorrectly calls
platform_driver_register() instead of platform_driver_unregister(),
which breaks cleanup when workqueue creation fails after successful
driver registration. Fix that as well.

The reference leak was identified by a static analysis tool I developed
and confirmed by manual review. The incorrect cleanup call was found
during code inspection.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f46d740fb0258982f00ffdbddc6486e674edafb5
Version < 4385092a86b94e1f332db35a3766108978c0722f
Status affected
Version f46d740fb0258982f00ffdbddc6486e674edafb5
Version < 1349af7f87df57940619f5b87990b799dac9ed8a
Status affected
Version f46d740fb0258982f00ffdbddc6486e674edafb5
Version < 6d51ad8f1c50c50d1abcc97fd243179967184c6a
Status affected
Version f46d740fb0258982f00ffdbddc6486e674edafb5
Version < a07c179a92e949172ca52f6d4a13202ea88cd4b7
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.1
Status affected
Version 0
Version < 4.1
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.112
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/4385092a86b94e1f332db35a3766108978c0722f
https://git.kernel.org/stable/c/1349af7f87df57940619f5b87990b799dac9ed8a
https://git.kernel.org/stable/c/6d51ad8f1c50c50d1abcc97fd243179967184c6a
https://git.kernel.org/stable/c/a07c179a92e949172ca52f6d4a13202ea88cd4b7