CVE-2026-68220

Source
https://cve.org/CVERecord?id=CVE-2026-68220
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68220.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-68220
Downstream
Published
2026-08-10T12:00:40.434Z
Modified
2026-08-12T04:19:21.996289621Z
Summary
media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe
Details

In the Linux kernel, the following vulnerability has been resolved:

media: nxp: imx8-isi: Add missing v4l2subdevcleanup() in crossbar and pipe

Both mxcisicrossbarinit() and mxcisipipeinit() call v4l2subdevinitfinalize() which allocates the subdev active state, but neither mxcisicrossbarcleanup() nor mxcisipipecleanup() calls v4l2subdev_cleanup() to free it.

This causes a memory leak on every rmmod, reported by kmemleak:

unreferenced object 0xffff0000d06fc800 (size 192): comm "(udev-worker)", pid 254, jiffies 4294913455 backtrace (crc 36eeae58): kmemleak_alloc+0x34/0x40 __kvmallocnodenoprof+0x5f8/0x7d8 __v4l2subdevstate_alloc+0x1fc/0x30c _v4l2subdevinitfinalize+0x178/0x368

Add the missing v4l2subdevcleanup() calls before mediaentitycleanup() in both crossbar and pipe cleanup paths.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68220.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
cf21f328fcafacf4f96e7a30ef9dceede1076378
Fixed
549dd1afce2cf79a826d1f9742effb4565d52871
Fixed
f04ec98605420e7c2c1ad6d2f6fb26692d4f218a
Fixed
9e61258fbc3cfc053e4c2ed72254c2de76772354
Fixed
9c5ddbabc31fda93a508d9b8f0c776a4a08e49f5
Fixed
567418eedd25b3d86d489807682030b4b98b73d9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68220.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.4.0
Fixed
6.6.148
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.101
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.42
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68220.json"