CVE-2026-68208: media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-10 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice() In vip_probe_slice(), the error check for devm_kzalloc() incorrectly uses PTR_ERR_OR_ZERO() which returns 0 for NULL pointer. Return -ENOMEM for devm_kzalloc() failure.

Affected products

Linux kernel: 7.0 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/956879b173c2cf782fbc3d18947fd1da286359cf
https://git.kernel.org/stable/c/e8f319eae96a3d718e810d52432020a2b77f5f60

Get alerted when CVE-2026-68208 or the next vulnerability affects your stack