CVE-2026-68225

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: i2c: alvium: fix critical pointer access in alvium_ctrl_init

The current implementation of alvium_ctrl_init creates several controls in function alvium_ctrl_init and uses the returned pointer without check. That can cause write access over NULL-pointer for several controls. The reworked code checks the pointers before adding flags.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux0a7af872915ee34668edf7e4018648a226d9e7f9 < 4bacfda44d36f165f6cb57bea408912886400ffaaffected
LinuxLinux0a7af872915ee34668edf7e4018648a226d9e7f9 < 7337c88205ed0ffc654f40266be0d3c3eb15fb29affected
LinuxLinux0a7af872915ee34668edf7e4018648a226d9e7f9 < eb2f934646aefb06314cecd1deb020794829b207affected
LinuxLinux0a7af872915ee34668edf7e4018648a226d9e7f9 < 4f6f28ff24709710c08557c127b3e4c3fb1b4159affected
LinuxLinux6.8affected
LinuxLinux0 < 6.8unaffected
LinuxLinux6.12.101 <= 6.12.*unaffected
LinuxLinux6.18.42 <= 6.18.*unaffected
LinuxLinux7.1.6 <= 7.1.*unaffected
LinuxLinux7.2-rc1 <= *unaffected

Weaknesses

References