CVE-2026-68224

media: mali-c55: Fix possible ERR_PTR in enable_streams

N/A
Published: August 10, 2026 at 12:00 PM UTC
Updated: August 17, 2026 at 05:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERR_PTR in enable_streams The media_pad_remote_pad_unique() function returns either a valid pointer or an ERR_PTR() on failure (-ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found). The return value was assigned directly to isp->remote_src and dereferenced in the next line without checking for errors, which could lead to an ERR_PTR dereference. Add proper error checking with IS_ERR() before dereferencing the pointer. Also set isp->remote_src to NULL on error to maintain consistency with other error paths in the function.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.19 ≤ v < 7.1.66.19 ≤ v < 7.26.19d5f281f3dd2988998daf45f591920c6013a620d8
Vendor states this is fixed in 65d4424275845e9f9012b40b5cbff4572771d768 (fixed)
Vendor states this is fixed in 94c6402e423d36a2bd6f62055a65a0d439d84da7 (fixed)
Vendor states this is fixed in 6.19 (unaffected)
Vendor states this is fixed in 7.1.6 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card