CVE-2026-68221

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
17/08/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: nuvoton: npcm-video: fix memory leaks in probe and remove<br /> <br /> npcm_video_probe() allocates the npcm_video structure with kzalloc_obj()<br /> but never frees it on any probe error path or in npcm_video_remove(),<br /> leaking the allocation on every failed probe and every normal unbind.<br /> <br /> Additionally, when npcm_video_setup_video() fails, the reserved memory<br /> association established by of_reserved_mem_device_init() in<br /> npcm_video_init() is not released, leaking the rmem_assigned_device<br /> entry on the global list.<br /> <br /> Fix both by adding kfree(video) to all probe error paths and to<br /> npcm_video_remove(), and adding the missing<br /> of_reserved_mem_device_release() call when npcm_video_setup_video()<br /> fails.

Impact