CVE-2026-68226
Received Received - Intake

Null pointer dereference in Linux kernel cx23885 driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: media: cx23885: add ioremap return check and cleanup Add a check for the return value of pci_ioremap_bar() in cx23885_dev_setup(). If ioremap for BAR0 fails, release the already allocated PCI memory region, decrement the device count, and return -ENODEV. This prevents a potential null pointer dereference and ensures proper cleanup on memory mapping failure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68226
EUVD
EUVD-2026-55327

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a missing check in the Linux kernel's cx23885 driver for the return value of pci_ioremap_bar(). If memory mapping fails, it could lead to a null pointer dereference. The fix ensures proper cleanup by releasing allocated resources and decrementing the device count when ioremap fails.

Detection Guidance

This vulnerability is specific to the Linux kernel's cx23885 driver and involves a missing check for ioremap return values. Detection requires verifying the kernel version and checking for unpatched systems. Commands like uname -a or checking kernel logs for cx23885 errors may help identify affected systems.

Impact Analysis

If exploited, this could cause system instability or crashes due to null pointer dereferences. It may also lead to denial-of-service conditions if the affected driver fails to handle memory mapping errors properly.

Mitigation Strategies

Apply the latest kernel updates from your Linux distribution to ensure the fix for CVE-2026-68226 is included. If immediate patching is not possible, consider disabling the cx23885 driver module if not in use to reduce attack surface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68226. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart