vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-68219

media: nxp: imx8-isi: Fix potential out-of-bounds issues

HIGH
7.8
CVSS Score
Published: August 10, 2026 at 12:00 PM UTC
Updated: August 17, 2026 at 05:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before applying the setting to hardware. Otherwise, the process will not respond even when Ctrl+C is executed.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.4 ≤ v < 6.12.1016.4 ≤ v < 6.18.426.4 ≤ v < 6.6.1486.4 ≤ v < 7.1.66.4 ≤ v < 7.26.4cf21f328fcafacf4f96e7a30ef9dceede1076378
Vendor states this is fixed in 28ae75dba701d7aa69a36802c398582933d3e0e6 (fixed)
Vendor states this is fixed in 57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cf (fixed)
Vendor states this is fixed in 690cdda752f3dc6b7a8b2d4a243e0207b66a1f37 (fixed)
Vendor states this is fixed in 75cdfaa7c908ca06d564170da9c80fb579f149a5 (fixed)
Vendor states this is fixed in ba7e1b06cbdad3b7c3314390cca22aff42f655d4 (fixed)
Vendor states this is fixed in 6.12.101 (unaffected)
Vendor states this is fixed in 6.18.42 (unaffected)
Vendor states this is fixed in 6.4 (unaffected)
Vendor states this is fixed in 6.6.148 (unaffected)
Vendor states this is fixed in 7.1.6 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

Source: cverecord
https://git.kernel.org/stable/c/690cdda752f3dc6b7a8b2d4a243e0207b66a1f37
Source: cverecord
https://git.kernel.org/stable/c/ba7e1b06cbdad3b7c3314390cca22aff42f655d4
Source: cverecord
https://git.kernel.org/stable/c/28ae75dba701d7aa69a36802c398582933d3e0e6
Source: cverecord
https://git.kernel.org/stable/c/75cdfaa7c908ca06d564170da9c80fb579f149a5
Source: cverecord
https://git.kernel.org/stable/c/57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cf

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card