CVE-2026-68226

A flaw was found in the Linux kernel's cx23885 media driver. A local attacker could potentially trigger a null pointer dereference by causing the pci_ioremap_bar() function to fail during memory mapping in cx23885_dev_setup(). This vulnerability could lead to a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as having Low severity for Red Hat Enterprise Linux because exploitation requires physical or virtual access to attach specialized Conexant CX23885 video capture hardware, which is uncommon in enterprise environments. Furthermore, an attacker must induce an I/O memory mapping failure during hardware initialization to trigger the flaw, limiting the blast radius strictly to a local denial of service without compromising host confidentiality or data integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.