CVE-2026-68207media: ti: vpe: unwind v4l2 device registration on probe error
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpe_top resource is missing, vpe_probe() returns -ENODEV after v4l2_device_register() has succeeded. Probe failures do not call the driver's remove callback, so the v4l2 device remains registered on that error path. Route that failure through the existing v4l2_device_unregister() unwind label, matching the other errors after v4l2_device_register().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 4d59c7d455853edca990848b1cb7c482b4628f32 builds before 0f0a60c000876bcd808a70d602c758c2e64c77d8; from 4d59c7d455853edca990848b1cb7c482b4628f32 before 4ecf0cc0cf59032a89bcdf36fbbb03bff5455fd9; from 4d59c7d455853edca990848b1cb7c482b4628f32 before 7d383357905de975e1dbde639e5fa7477075d104; from 4d59c7d455853edca990848b1cb7c482b4628f32 before 7e6521dd747eca3cb3d4cd3ddcf20f266494f63d; from 4d59c7d455853edca990848b1cb7c482b4628f32 before fcbbaf9cb9722a82f0221c56114037fc537f4ada; from 4d59c7d455853edca990848b1cb7c482b4628f32 before e0f1c9a90ef665f2587c274a8fed59f2dfc575a6 | CNA record |
References
- https://git.kernel.org/stable/c/0f0a60c000876bcd808a70d602c758c2e64c77d8
- https://git.kernel.org/stable/c/4ecf0cc0cf59032a89bcdf36fbbb03bff5455fd9
- https://git.kernel.org/stable/c/7d383357905de975e1dbde639e5fa7477075d104
- https://git.kernel.org/stable/c/7e6521dd747eca3cb3d4cd3ddcf20f266494f63d
- https://git.kernel.org/stable/c/fcbbaf9cb9722a82f0221c56114037fc537f4ada
- https://git.kernel.org/stable/c/e0f1c9a90ef665f2587c274a8fed59f2dfc575a6
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.