CVE-2026-68215
Received Received - Intake

Radio-si476x V4L2 Device Unregister Failure on Probe Error

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2_device on probe failure si476x_radio_probe() registers radio->v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns through the exit label after freeing only the control handler. A failed probe does not call si476x_radio_remove(), so the v4l2_device_unregister() there is not reached. This leaves the parent device reference taken by v4l2_device_register() behind on the error path. Unregister the V4L2 device in the probe error path after freeing the controls.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68215
EUVD
EUVD-2026-55316

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's media subsystem, specifically in the radio-si476x driver. When the si476x_radio_probe() function fails during device initialization, it does not properly clean up resources. The v4l2_device is registered before other critical steps, and if those fail, the cleanup process skips unregistering the v4l2_device. This leaves a dangling reference to the parent device.

Detection Guidance

This vulnerability is specific to the Linux kernel's media subsystem and affects the radio-si476x driver. Detection requires checking kernel logs for probe failures in the si476x_radio module. Use dmesg | grep si476x to inspect kernel messages for errors during driver initialization.

Impact Analysis

This vulnerability could lead to resource leaks in the Linux kernel when the radio-si476x driver fails to initialize properly. While it does not directly cause data breaches or system compromise, it may cause instability or unexpected behavior in systems using this driver. Users might experience issues with radio functionality or system crashes during device probing.

Mitigation Strategies

Update your Linux kernel to a patched version where this issue is resolved. If using a custom kernel, ensure the si476x_radio driver is updated to properly unregister the v4l2_device on probe failure. Monitor kernel logs for related errors after updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68215. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart