In the Linux kernel, the following vulnerability has been resolved:
media: nuvoton: npcm-video: fix memory leaks in probe and remove
npcmvideoprobe() allocates the npcmvideo structure with kzallocobj() but never frees it on any probe error path or in npcmvideoremove(), leaking the allocation on every failed probe and every normal unbind.
Additionally, when npcmvideosetupvideo() fails, the reserved memory association established by ofreservedmemdeviceinit() in npcmvideoinit() is not released, leaking the rmemassigned_device entry on the global list.
Fix both by adding kfree(video) to all probe error paths and to npcmvideoremove(), and adding the missing ofreservedmemdevicerelease() call when npcmvideosetup_video() fails.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68221.json",
"cna_assigner": "Linux"
}