Description
In the Linux kernel, the following vulnerability has been resolved:
media: stm32: dcmi: unregister notifier on probe failure
dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove().
Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules.
[hverkuil: added Fixes tag]
Metrics
CVSS 3.1 7.8/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAffected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= d079f94c90469f413920b9f2b201537fac2ceb06, < 222a9301b086852b90d3b092fef436c3f4e927c4; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 37ff63c5d7119cbc5c6bacdcc658add6008a8e1f; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 6c6f22b7e6cbc4e8c1e359fc9b190419391c3db7; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 931abe1deb65b919d23fa203d7f6d6fbd4fccd8e; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 4b7ee504969e074725e439c949f2483e5fa5572a; >= d079f94c90469f413920b9f2b201537fac2ceb06, < 084973ebd67b28f0945c5d45408f86c58b540110 |
| Linux | Linux | 4.20 |
References
- https://git.kernel.org/stable/c/084973ebd67b28f0945c5d45408f86c58b540110
- https://git.kernel.org/stable/c/222a9301b086852b90d3b092fef436c3f4e927c4
- https://git.kernel.org/stable/c/37ff63c5d7119cbc5c6bacdcc658add6008a8e1f
- https://git.kernel.org/stable/c/4b7ee504969e074725e439c949f2483e5fa5572a
- https://git.kernel.org/stable/c/6c6f22b7e6cbc4e8c1e359fc9b190419391c3db7
- https://git.kernel.org/stable/c/931abe1deb65b919d23fa203d7f6d6fbd4fccd8e
Timeline
- Published
- Aug 10, 2026
- Last modified
- Aug 19, 2026
- NVD status
- Received