CVE-2026-68226media: cx23885: add ioremap return check and cleanup
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: media: cx23885: add ioremap return check and cleanup Add a check for the return value of pci_ioremap_bar() in cx23885_dev_setup(). If ioremap for BAR0 fails, release the already allocated PCI memory region, decrement the device count, and return -ENODEV. This prevents a potential null pointer dereference and ensures proper cleanup on memory mapping failure.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d19770e5178a4bc49641711246360c25781d20a4 before f58f4b571bd75c78bbf15441086ba0c2830c1aa5; from d19770e5178a4bc49641711246360c25781d20a4 before 9052fec0bb84eace81ac7bad071266052870cdf3; from d19770e5178a4bc49641711246360c25781d20a4 before 6a7636e3d5204fb18fdf1c3f909a3d9d9e24064c; from d19770e5178a4bc49641711246360c25781d20a4 before 8fbdca4c99f68734e9b6c030973fb61a11bede15; from d19770e5178a4bc49641711246360c25781d20a4 before 83540d86d717735b52a43e4ba1b784da5cc2310a; from d19770e5178a4bc49641711246360c25781d20a4 before c68c4ce72feb6fcccc843eb3baa7af60189ed567; from d19770e5178a4bc49641711246360c25781d20a4 before ff3c670a1de3a714f5644e37b9446fe7c3299fd3; from d19770e5178a4bc49641711246360c25781d20a4 before a0701e387b46e2481c05b47f1235b954bfc2af3e | CNA record |
References
- https://git.kernel.org/stable/c/f58f4b571bd75c78bbf15441086ba0c2830c1aa5
- https://git.kernel.org/stable/c/9052fec0bb84eace81ac7bad071266052870cdf3
- https://git.kernel.org/stable/c/6a7636e3d5204fb18fdf1c3f909a3d9d9e24064c
- https://git.kernel.org/stable/c/8fbdca4c99f68734e9b6c030973fb61a11bede15
- https://git.kernel.org/stable/c/83540d86d717735b52a43e4ba1b784da5cc2310a
- https://git.kernel.org/stable/c/c68c4ce72feb6fcccc843eb3baa7af60189ed567
- https://git.kernel.org/stable/c/ff3c670a1de3a714f5644e37b9446fe7c3299fd3
- https://git.kernel.org/stable/c/a0701e387b46e2481c05b47f1235b954bfc2af3e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.