What’s Vulnerable › Vulnerabilities

CVE-2026-46235: media: saa7164: add ioremap return checks and cleanups

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-28 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: media: saa7164: add ioremap return checks and cleanups Add checks for ioremap return values in saa7164_dev_setup(). If ioremap for BAR0 or BAR2 fails, release the already allocated PCI memory regions, remove the device from the global list, decrement the device count, and return -ENODEV. This prevents potential null pointer dereferences and ensures proper cleanup on memory mapping failures.

Affected products

• Linux kernel: from 2.6.32 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.90; from 6.13 before 6.18.32; from 6.19 before 7.0.9 — fixed in 6.1.175, 6.12.90, 6.18.32, 6.6.140, 7.0.9

How to fix

Upgrade to a fixed version: Linux kernel 6.1.175, 6.12.90, 6.18.32, 6.6.140. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/23dee5990d2c27ed79567fd61ccfe6876768531a
• https://git.kernel.org/stable/c/3ce8f3057c51bb0a66aa3fab0862be74e9f88684
• https://git.kernel.org/stable/c/6047dc542fa404b5c187cc2c7906aaaaec6d11ed
• https://git.kernel.org/stable/c/6c22a6d8e4c1507bba504aeebe80476144a373eb
• https://git.kernel.org/stable/c/a9b83f46e52cf1239d780920d1a7a3e415f7b5d9
• https://git.kernel.org/stable/c/d51c60a498e83c9a79884c8e420f97e3885c9583

Get alerted when CVE-2026-46235 or the next vulnerability affects your stack