CVE-2026-68203

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: vivid: fix cleanup bugs in vivid_init()<br /> <br /> When platform_device_register() fails in vivid_init(), the embedded<br /> struct device in vivid_pdev has already been initialized by<br /> device_initialize(), but the failure path jumps to free_output_strings<br /> without dropping the device reference for the current platform device:<br /> <br /> vivid_init()<br /> -&gt; platform_device_register(&amp;vivid_pdev)<br /> -&gt; device_initialize(&amp;vivid_pdev.dev)<br /> -&gt; setup_pdev_dma_masks(&amp;vivid_pdev)<br /> -&gt; platform_device_add(&amp;vivid_pdev)<br /> <br /> This leads to a reference leak when platform_device_register() fails.<br /> Fix this by calling platform_device_put() before jumping to the common<br /> cleanup path.<br /> <br /> Also, the unreg_driver label incorrectly calls<br /> platform_driver_register() instead of platform_driver_unregister(),<br /> which breaks cleanup when workqueue creation fails after successful<br /> driver registration. Fix that as well.<br /> <br /> The reference leak was identified by a static analysis tool I developed<br /> and confirmed by manual review. The incorrect cleanup call was found<br /> during code inspection.