CVE-2026-68203
kernel: media: vivid: fix cleanup bugs in vivid_init()
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · August 10, 2026
Updated · October 15, 2026
Description
A flaw was found in the Linux kernel's vivid media driver. This vulnerability involves two cleanup bugs within the vivid_init() function. Firstly, a reference leak occurs if platform_device_register() fails, preventing the proper release of device resources. Secondly, an incorrect function call during cleanup can lead to improper driver unregistration, potentially causing system instability or further resource leaks. These issues could lead to a denial of service over time due to resource exhaustion.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime