Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-68223 — media: meson: vdec: Fix memory leak in error path of vdec_open

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: Fix memory leak in error path of vdec_open The vdec_open() function previously jumped directly to err_m2m_rel…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
7.8 HIGH
CVE-2026-68222 — media: msi2500: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queue() …

linux_kernel | Denial of Service
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
0.0 NA
CVE-2026-68221 — media: nuvoton: npcm-video: fix memory leaks in probe and remove

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcm_video_probe() allocates the npcm_video structure with kzall…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 17, 2026
Aug 10, 2026
Aug 17, 2026
0.0 NA
CVE-2026-68220 — media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe Both mxc_isi_crossbar_init() and mxc_isi_pipe_init()…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 17, 2026
Aug 10, 2026
Aug 17, 2026
7.8 HIGH
CVE-2026-68219 — media: nxp: imx8-isi: Fix potential out-of-bounds issues

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16. Add min…

linux_kernel | Misconfiguration
Aug 10, 2026 Aug 17, 2026
Aug 10, 2026
Aug 17, 2026
0.0 NA
CVE-2026-68218 — media: pci: dm1105: Free allocated workqueue

In the Linux kernel, the following vulnerability has been resolved: media: pci: dm1105: Free allocated workqueue Destroy allocated workqueue in remove() callback to free its resources, thus fixing …

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
0.0 NA
CVE-2026-68217 — media: pwc: Drain fill_buf on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Drain fill_buf on start_streaming() failure pwc_isoc_init() submits its isochronous URBs with usb_submit_urb(.., GFP_…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
7.8 HIGH
CVE-2026-68216 — media: pwc: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queue() befo…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
0.0 NA
CVE-2026-68215 — media: radio-si476x: Unregister v4l2_device on probe failure

In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2_device on probe failure si476x_radio_probe() registers radio->v4l2dev before allocating the …

linux_kernel | Misconfiguration
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
0.0 NA
CVE-2026-68214 — media: rtl2832: fix use-after-free in rtl2832_remove()

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832: fix use-after-free in rtl2832_remove() cancel_delayed_work_sync() is called before i2c_mux_del_adapters() in rtl2…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
7.8 HIGH
CVE-2026-68213 — media: rtl2832_sdr: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queu…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
0.0 NA
CVE-2026-68212 — media: saa7134: Fix a possible memory leak in saa7134_video_init1

In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134_video_init1 In saa7134_video_init1(), the return value of the first saa7134…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
0.0 NA
CVE-2026-68211 — media: stm32-dcmipp: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_que…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 17, 2026
Aug 10, 2026
Aug 17, 2026
7.8 HIGH
CVE-2026-68210 — media: stm32: dcmi: unregister notifier on probe failure

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggl…

linux_kernel | Misconfiguration
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
7.8 HIGH
CVE-2026-68209 — media: sun4i-csi: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queue(…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
0.0 NA
CVE-2026-68208 — media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice()

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice() In vip_probe_slice(), the error check for devm_kzalloc(…

linux_kernel | Memory Corruption
Aug 10, 2026 Aug 17, 2026
Aug 10, 2026
Aug 17, 2026
0.0 NA
CVE-2026-68207 — media: ti: vpe: unwind v4l2 device registration on probe error

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpe_top resource is missing, vpe_probe() returns -ENODEV af…

linux_kernel | Misconfiguration
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
7.8 HIGH
CVE-2026-68206 — media: v4l2-ctrls: validate HEVC active reference counts

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common…

linux_kernel | Misconfiguration
Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
0.0 NA
CVE-2026-68205 — media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() The v4l2 helper v4l2_async_register_subde…

linux_kernel | Misconfiguration
Aug 10, 2026 Aug 23, 2026
Aug 10, 2026
Aug 23, 2026
7.8 HIGH
CVE-2026-68204 — media: vivid: check for vb2_is_busy() when toggling caps

In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2_is_busy() when toggling caps The vivid_update_format_cap/out() functions must only be called if the c…

Aug 10, 2026 Aug 19, 2026
Aug 10, 2026
Aug 19, 2026
Showing 20 of 14287 Results