CVE-2026-68226

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: cx23885: add ioremap return check and cleanup

Add a check for the return value of pci_ioremap_bar() in cx23885_dev_setup(). If ioremap for BAR0 fails, release the already allocated PCI memory region, decrement the device count, and return -ENODEV.

This prevents a potential null pointer dereference and ensures proper cleanup on memory mapping failure.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d19770e5178a4bc49641711246360c25781d20a4, < f58f4b571bd75c78bbf15441086ba0c2830c1aa5; >= d19770e5178a4bc49641711246360c25781d20a4, < 9052fec0bb84eace81ac7bad071266052870cdf3; >= d19770e5178a4bc49641711246360c25781d20a4, < 6a7636e3d5204fb18fdf1c3f909a3d9d9e24064c; >= d19770e5178a4bc49641711246360c25781d20a4, < 8fbdca4c99f68734e9b6c030973fb61a11bede15; >= d19770e5178a4bc49641711246360c25781d20a4, < 83540d86d717735b52a43e4ba1b784da5cc2310a; >= d19770e5178a4bc49641711246360c25781d20a4, < c68c4ce72feb6fcccc843eb3baa7af60189ed567; >= d19770e5178a4bc49641711246360c25781d20a4, < ff3c670a1de3a714f5644e37b9446fe7c3299fd3; >= d19770e5178a4bc49641711246360c25781d20a4, < a0701e387b46e2481c05b47f1235b954bfc2af3e
LinuxLinux2.6.24

References

Timeline

Published
Aug 10, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-68227In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfacesCVE-2026-682287.8In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move src_buf Removal to finish_encode DurinCVE-2026-682297.1In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumCVE-2026-68238.2HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inherit allow_CVE-2026-682307.3In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalidCVE-2026-68231In the Linux kernel, the following vulnerability has been resolved: media: airspy: Return queued buffers on start_streaming() failure The CVE-2026-68232In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict If kvmalloCVE-2026-68233In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer cCVE-2026-68234In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved amdgpu_boCVE-2026-68235In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skip non-DP stream encoders for DP MST On DCECVE-2026-682367.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set new_stream to NULL after release In dm_update_crtCVE-2026-68237In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset pre_reset
CVE-2026-68226: Unscored | Vulnix