CVE-2026-68212
CVE CVE-2026-68212EUVD EUVD-2026-55313Published 2026-08-10T12:00:31.000Z
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134_video_init1 In saa7134_video_init1(), the return value of the first saa7134_pgtable_alloc() is not checked. If it fails, the function continues as if successful, leaving the driver with an invalid page table. Additionally, if vb2_queue_init() for the VBI queue fails after the video queue page table has been allocated, the allocated memory is not freed before returning. The second saa7134_pgtable_alloc() also lacks a return value check. Errors occur during device probing before the device is fully registered, the normal cleanup path in saa7134_finidev() is not executed, leading to memory leaks and potential use of uninitialized DMA resources. Check the return value of both saa7134_pgtable_alloc() calls and propagate errors. On failure of any later step, free allocated page tables to avoid memory leaks. Ensure control handlers are also released on error to prevent further resource leakage. Found by code review.
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux patch: 7.1.6; a00e68888d5d2b583b13d7d58204a27207af95fd <f86ed548386e3050e5f8f25b450d09dc009d9a88; a00e68888d5d2b583b13d7d58204a27207af95fd <b7936e8cbec1b96b126058eeb005e5b9111df38e; patch: 6.18.42; a00e68888d5d2b583b13d7d58204a27207af95fd <134c979dd721e22f196d71026432ee37d1f5cc38; patch: 6.12.101; patch: 7.2-rc1; patch: 0; patch: 6.6.148; 3.16; a00e68888d5d2b583b13d7d58204a27207af95fd <1731dd61b6c0b7435c139951d2b7eada6c9667a8; a00e68888d5d2b583b13d7d58204a27207af95fd <e1ef361ee31d1dba5dcae2cdd50f9c1352df0c23
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.