CVE-2026-90405

A flaw was found in the media: stm32: dcmi component of the Linux kernel. Improper error handling in the probe() function can lead to a null pointer dereference. This issue occurs because dma_release_channel() is called before the dcmi->dma_chan variable is properly assigned, potentially allowing a local attacker to cause a denial of service (DoS) due to system instability or crashes. Additionally, other error handling bugs could result in memory leaks.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.