CVE-2026-68230

A flaw was found in the Linux kernel's media: amlogic-c3 driver. This vulnerability arises from improper validation of automatic white balance (AWB) and automatic exposure (AE) configuration parameters. Specifically, the driver does not correctly check the number of zones against the allocated memory for zone weights, leading to invalid memory access. This can result in a buffer overflow, which may allow an attacker to corrupt memory and potentially impact system stability or integrity.

Red Hat Enterprise Linux and other Red Hat offerings are not affected by this vulnerability because the Amlogic C3 camera subsystem driver is not included in supported kernels. This flaw involves improper bounds checking during image signal processor parameter configuration, which could lead to out-of-bounds memory corruption. Because the vulnerable codebase was introduced in upstream Linux kernel releases not shipped in Red Hat enterprise products, there is no security exposure for Red Hat customers.