CVE-2026-68226

media: cx23885: add ioremap return check and cleanup

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: cx23885: add ioremap return check and cleanup

Add a check for the return value of pci_ioremap_bar() in cx23885_dev_setup(). If ioremap for BAR0 fails, release the already allocated PCI memory region, decrement the device count, and return -ENODEV.

This prevents a potential null pointer dereference and ensures proper cleanup on memory mapping failure.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d19770e5178a4bc49641711246360c25781d20a4 to before f58f4b571bd75c78bbf15441086ba0c2830c1aa5Affected d19770e5178a4bc49641711246360c25781d20a4 to before 9052fec0bb84eace81ac7bad071266052870cdf3Affected d19770e5178a4bc49641711246360c25781d20a4 to before 6a7636e3d5204fb18fdf1c3f909a3d9d9e24064cAffected d19770e5178a4bc49641711246360c25781d20a4 to before 8fbdca4c99f68734e9b6c030973fb61a11bede15Affected d19770e5178a4bc49641711246360c25781d20a4 to before 83540d86d717735b52a43e4ba1b784da5cc2310aAffected d19770e5178a4bc49641711246360c25781d20a4 to before c68c4ce72feb6fcccc843eb3baa7af60189ed567Affected d19770e5178a4bc49641711246360c25781d20a4 to before ff3c670a1de3a714f5644e37b9446fe7c3299fd3Affected d19770e5178a4bc49641711246360c25781d20a4 to before a0701e387b46e2481c05b47f1235b954bfc2af3eAffected
LinuxLinux	2.6.24Affected before 2.6.24Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

d19770e5178a4bc49641711246360c25781d20a4 to before f58f4b571bd75c78bbf15441086ba0c2830c1aa5Affected
d19770e5178a4bc49641711246360c25781d20a4 to before 9052fec0bb84eace81ac7bad071266052870cdf3Affected
d19770e5178a4bc49641711246360c25781d20a4 to before 6a7636e3d5204fb18fdf1c3f909a3d9d9e24064cAffected
d19770e5178a4bc49641711246360c25781d20a4 to before 8fbdca4c99f68734e9b6c030973fb61a11bede15Affected
d19770e5178a4bc49641711246360c25781d20a4 to before 83540d86d717735b52a43e4ba1b784da5cc2310aAffected
d19770e5178a4bc49641711246360c25781d20a4 to before c68c4ce72feb6fcccc843eb3baa7af60189ed567Affected
d19770e5178a4bc49641711246360c25781d20a4 to before ff3c670a1de3a714f5644e37b9446fe7c3299fd3Affected
d19770e5178a4bc49641711246360c25781d20a4 to before a0701e387b46e2481c05b47f1235b954bfc2af3eAffected

LinuxLinux

2.6.24Affected
before 2.6.24Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.