CVE-2026-68210 PUBLISHED

media: stm32: dcmi: unregister notifier on probe failure

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

media: stm32: dcmi: unregister notifier on probe failure

dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line. If reset_control_assert() or reset_control_deassert() fails afterwards, probe returns through err_cleanup and the driver core will not call dcmi_remove().

Unregister the notifier before cleaning it up on that error path, matching the successful remove path and the V4L2 async notifier lifetime rules.

[hverkuil: added Fixes tag]

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from d079f94c90469f413920b9f2b201537fac2ceb06 to 37ff63c5d7119cbc5c6bacdcc658add6008a8e1f (excl.)
  • affected from d079f94c90469f413920b9f2b201537fac2ceb06 to 6c6f22b7e6cbc4e8c1e359fc9b190419391c3db7 (excl.)
  • affected from d079f94c90469f413920b9f2b201537fac2ceb06 to 931abe1deb65b919d23fa203d7f6d6fbd4fccd8e (excl.)
  • affected from d079f94c90469f413920b9f2b201537fac2ceb06 to 4b7ee504969e074725e439c949f2483e5fa5572a (excl.)
  • affected from d079f94c90469f413920b9f2b201537fac2ceb06 to 084973ebd67b28f0945c5d45408f86c58b540110 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 4.20 is affected
  • unaffected from 0 to 4.20 (excl.)
  • unaffected from 6.6.148 to 6.6.* (incl.)
  • unaffected from 6.12.101 to 6.12.* (incl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc1 to * (incl.)

References