What’s Vulnerable › Vulnerabilities

CVE-2026-68210: media: stm32: dcmi: unregister notifier on probe failure

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-10 · updated 2026-08-19

Description

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove(). Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules. [hverkuil: added Fixes tag]

Affected products

• Linux kernel: 4.20 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/084973ebd67b28f0945c5d45408f86c58b540110
• https://git.kernel.org/stable/c/222a9301b086852b90d3b092fef436c3f4e927c4
• https://git.kernel.org/stable/c/37ff63c5d7119cbc5c6bacdcc658add6008a8e1f
• https://git.kernel.org/stable/c/4b7ee504969e074725e439c949f2483e5fa5572a
• https://git.kernel.org/stable/c/6c6f22b7e6cbc4e8c1e359fc9b190419391c3db7
• https://git.kernel.org/stable/c/931abe1deb65b919d23fa203d7f6d6fbd4fccd8e

Get alerted when CVE-2026-68210 or the next vulnerability affects your stack