In the Linux kernel, the following vulnerability has been resolved:
media: stm32: dcmi: unregister notifier on probe failure
dcmigraphinit() registers the async notifier before dcmiprobe() toggles the reset line. If resetcontrolassert() or resetcontroldeassert() fails afterwards, probe returns through errcleanup and the driver core will not call dcmi_remove().
Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules.
[hverkuil: added Fixes tag]
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68210.json",
"cna_assigner": "Linux"
}