CVE-2026-68219

media: nxp: imx8-isi: Fix potential out-of-bounds issues

State: Published
Severity: 7.8 High
Published: Aug 10, 2026
Updated: Aug 17, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: nxp: imx8-isi: Fix potential out-of-bounds issues

The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before applying the setting to hardware. Otherwise, the process will not respond even when Ctrl+C is executed.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cf21f328fcafacf4f96e7a30ef9dceede1076378 to before 690cdda752f3dc6b7a8b2d4a243e0207b66a1f37Affected cf21f328fcafacf4f96e7a30ef9dceede1076378 to before ba7e1b06cbdad3b7c3314390cca22aff42f655d4Affected cf21f328fcafacf4f96e7a30ef9dceede1076378 to before 28ae75dba701d7aa69a36802c398582933d3e0e6Affected cf21f328fcafacf4f96e7a30ef9dceede1076378 to before 75cdfaa7c908ca06d564170da9c80fb579f149a5Affected cf21f328fcafacf4f96e7a30ef9dceede1076378 to before 57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cfAffected
LinuxLinux	6.4Affected before 6.4Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

cf21f328fcafacf4f96e7a30ef9dceede1076378 to before 690cdda752f3dc6b7a8b2d4a243e0207b66a1f37Affected
cf21f328fcafacf4f96e7a30ef9dceede1076378 to before ba7e1b06cbdad3b7c3314390cca22aff42f655d4Affected
cf21f328fcafacf4f96e7a30ef9dceede1076378 to before 28ae75dba701d7aa69a36802c398582933d3e0e6Affected
cf21f328fcafacf4f96e7a30ef9dceede1076378 to before 75cdfaa7c908ca06d564170da9c80fb579f149a5Affected
cf21f328fcafacf4f96e7a30ef9dceede1076378 to before 57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cfAffected

LinuxLinux

6.4Affected
before 6.4Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.