CVE-2026-68224
Received Received - Intake

NULL Pointer Dereference in Linux Kernel Mali-C55 Media Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERR_PTR in enable_streams The media_pad_remote_pad_unique() function returns either a valid pointer or an ERR_PTR() on failure (-ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found). The return value was assigned directly to isp->remote_src and dereferenced in the next line without checking for errors, which could lead to an ERR_PTR dereference. Add proper error checking with IS_ERR() before dereferencing the pointer. Also set isp->remote_src to NULL on error to maintain consistency with other error paths in the function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68224
EUVD
EUVD-2026-55325

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a potential ERR_PTR dereference in the media subsystem, specifically in the mali-c55 driver. The media_pad_remote_pad_unique() function can return an error pointer instead of a valid pointer, which was then dereferenced without proper error checking. This could lead to undefined behavior or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's media subsystem, particularly the Mali-C55 driver. Detection requires checking kernel logs for errors related to media_pad_remote_pad_unique() or ERR_PTR dereferences in the media subsystem. Use commands like dmesg | grep -i 'mali-c55' or journalctl -k | grep -i 'ERR_PTR' to search for related errors.

Impact Analysis

If exploited, this vulnerability could cause system instability, crashes, or unexpected behavior in systems using the affected Linux kernel component. It may lead to denial of service or other unintended consequences in media processing tasks.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. If updating is not immediately possible, apply the patch manually if available. Monitor kernel logs for any signs of exploitation or errors related to this issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68224. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart