In the Linux kernel, the following vulnerability has been resolved:
media: nxp: imx8-isi: Add missing v4l2subdevcleanup() in crossbar and pipe
Both mxcisicrossbarinit() and mxcisipipeinit() call v4l2subdevinitfinalize() which allocates the subdev active state, but neither mxcisicrossbarcleanup() nor mxcisipipecleanup() calls v4l2subdev_cleanup() to free it.
This causes a memory leak on every rmmod, reported by kmemleak:
unreferenced object 0xffff0000d06fc800 (size 192): comm "(udev-worker)", pid 254, jiffies 4294913455 backtrace (crc 36eeae58): kmemleak_alloc+0x34/0x40 __kvmallocnodenoprof+0x5f8/0x7d8 __v4l2subdevstate_alloc+0x1fc/0x30c _v4l2subdevinitfinalize+0x178/0x368
Add the missing v4l2subdevcleanup() calls before mediaentitycleanup() in both crossbar and pipe cleanup paths.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68220.json",
"cna_assigner": "Linux"
}