CVE-2026-68219media: nxp: imx8-isi: Fix potential out-of-bounds issues
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before applying the setting to hardware. Otherwise, the process will not respond even when Ctrl+C is executed.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from cf21f328fcafacf4f96e7a30ef9dceede1076378 before 690cdda752f3dc6b7a8b2d4a243e0207b66a1f37; from cf21f328fcafacf4f96e7a30ef9dceede1076378 before ba7e1b06cbdad3b7c3314390cca22aff42f655d4; from cf21f328fcafacf4f96e7a30ef9dceede1076378 before 28ae75dba701d7aa69a36802c398582933d3e0e6; from cf21f328fcafacf4f96e7a30ef9dceede1076378 before 75cdfaa7c908ca06d564170da9c80fb579f149a5; from cf21f328fcafacf4f96e7a30ef9dceede1076378 before 57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cf | CNA record |
References
- https://git.kernel.org/stable/c/690cdda752f3dc6b7a8b2d4a243e0207b66a1f37
- https://git.kernel.org/stable/c/ba7e1b06cbdad3b7c3314390cca22aff42f655d4
- https://git.kernel.org/stable/c/28ae75dba701d7aa69a36802c398582933d3e0e6
- https://git.kernel.org/stable/c/75cdfaa7c908ca06d564170da9c80fb579f149a5
- https://git.kernel.org/stable/c/57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cf
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.