CVE-2026-68223
media: meson: vdec: Fix memory leak in error path of vdec_open
Description
In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: Fix memory leak in error path of vdec_open The vdec_open() function previously jumped directly to err_m2m_release when vdec_init_ctrls() failed, skipping release of the m2m context. This caused a resource leak. Fix it by introducing a proper err_m2m_ctx_release label that calls v4l2_m2m_ctx_release(sess->m2m_ctx) before releasing the m2m device. This was identified via kmemleak: unreferenced object 0xffff0000205d6878 (size 8): comm "v4l_id", pid 5289, jiffies 4294938580 hex dump (first 8 bytes): 40 d2 49 18 00 00 ff ff @.I..... backtrace (crc d3204599): kmemleak_alloc+0xc8/0xf0 __kvmalloc_node_noprof+0x60c/0x850 v4l2_ctrl_handler_init_class+0x1b4/0x2e8 [videodev] vdec_open+0x1f4/0x788 [meson_vdec] v4l2_open+0x144/0x460 [videodev] chrdev_open+0x1ac/0x500 do_dentry_open+0x3f0/0xfe8 vfs_open+0x68/0x320 do_open+0x2d8/0x9a8 path_openat+0x1d0/0x4f0 do_filp_open+0x190/0x380 do_sys_openat2+0xf8/0x1b0 __arm64_sys_openat+0x13c/0x1e8 invoke_syscall+0xdc/0x268 el0_svc_common.constprop.0+0x178/0x258 do_el0_svc+0x4c/0x70
INFO
Published Date :
Aug. 10, 2026, 1:20 p.m.
Last Modified :
Aug. 17, 2026, 5:18 a.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
- Apply the patch for media: meson: vdec: Fix memory leak.
- Update the Linux kernel to the latest version.
- Rebuild and deploy the patched kernel.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-68223.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-68223 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-68223
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-68223 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-68223 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 17, 2026
Action Type Old Value New Value Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': 'c6cd08a71a630f19b10c318e76e3c56e1dd10e00', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '2cf0171ad594860e31723c671e37824ce12c01ea', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '1391b75bf0119b5d37f1c1c3078d452a01967f9b', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '99f3527bd1a27ff798d59177ed045b0dd87deaef', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '940f161f734b25f175a95d2684c2021f6323693a', 'versionType': 'git'}], 'programFiles': ['drivers/staging/media/meson/vdec/vdec.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.3'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.3', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.42', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.6', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/staging/media/meson/vdec/vdec.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': 'c6cd08a71a630f19b10c318e76e3c56e1dd10e00', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '2cf0171ad594860e31723c671e37824ce12c01ea', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '1391b75bf0119b5d37f1c1c3078d452a01967f9b', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '99f3527bd1a27ff798d59177ed045b0dd87deaef', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '940f161f734b25f175a95d2684c2021f6323693a', 'versionType': 'git'}], 'programFiles': ['drivers/staging/media/meson/vdec/vdec.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.3'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.3', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.42', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.6', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/staging/media/meson/vdec/vdec.c'], 'defaultStatus': 'affected'}] -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 10, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': 'c6cd08a71a630f19b10c318e76e3c56e1dd10e00', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '2cf0171ad594860e31723c671e37824ce12c01ea', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '1391b75bf0119b5d37f1c1c3078d452a01967f9b', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '99f3527bd1a27ff798d59177ed045b0dd87deaef', 'versionType': 'git'}, {'status': 'affected', 'version': '3e7f51bd96077acad6acd7b45668f65b44233c4e', 'lessThan': '940f161f734b25f175a95d2684c2021f6323693a', 'versionType': 'git'}], 'programFiles': ['drivers/staging/media/meson/vdec/vdec.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.3'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.3', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.42', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.6', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/staging/media/meson/vdec/vdec.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: Fix memory leak in error path of vdec_open The vdec_open() function previously jumped directly to err_m2m_release when vdec_init_ctrls() failed, skipping release of the m2m context. This caused a resource leak. Fix it by introducing a proper err_m2m_ctx_release label that calls v4l2_m2m_ctx_release(sess->m2m_ctx) before releasing the m2m device. This was identified via kmemleak: unreferenced object 0xffff0000205d6878 (size 8): comm "v4l_id", pid 5289, jiffies 4294938580 hex dump (first 8 bytes): 40 d2 49 18 00 00 ff ff @.I..... backtrace (crc d3204599): kmemleak_alloc+0xc8/0xf0 __kvmalloc_node_noprof+0x60c/0x850 v4l2_ctrl_handler_init_class+0x1b4/0x2e8 [videodev] vdec_open+0x1f4/0x788 [meson_vdec] v4l2_open+0x144/0x460 [videodev] chrdev_open+0x1ac/0x500 do_dentry_open+0x3f0/0xfe8 vfs_open+0x68/0x320 do_open+0x2d8/0x9a8 path_openat+0x1d0/0x4f0 do_filp_open+0x190/0x380 do_sys_openat2+0xf8/0x1b0 __arm64_sys_openat+0x13c/0x1e8 invoke_syscall+0xdc/0x268 el0_svc_common.constprop.0+0x178/0x258 do_el0_svc+0x4c/0x70 Added Reference https://git.kernel.org/stable/c/1391b75bf0119b5d37f1c1c3078d452a01967f9b Added Reference https://git.kernel.org/stable/c/2cf0171ad594860e31723c671e37824ce12c01ea Added Reference https://git.kernel.org/stable/c/940f161f734b25f175a95d2684c2021f6323693a Added Reference https://git.kernel.org/stable/c/99f3527bd1a27ff798d59177ed045b0dd87deaef Added Reference https://git.kernel.org/stable/c/c6cd08a71a630f19b10c318e76e3c56e1dd10e00