CVE-2026-68203: Linux kernel · media: vivid: fix cleanup bugs in vivid_init()
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in ae6ccae32f51f788035d2c5cec898491dd7150ef : update Linux kernel when convenient.
Data as of 26 Oct 2026, 21:22 UTC
Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 10% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in ae6ccae32f51f788035d2c5cec898491dd7150ef, a07c179a92e949172ca52f6d4a13202ea88cd4b7, 4385092a86b94e1f332db35a3766108978c0722f +2
Exploitation evidence
Disclosed: evidence found.
CVE published 10 Aug 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
The issues have been fixed in the Linux kernel in the commits identified by the fixedVersions hashes. Users should update their Linux kernel to a version including these fixes. Since this is a kernel-level fix, applying the official kernel update from the Linux vendor or distribution is the recommended remediation. No additional mitigations are indicated.
Description
CVE-2026-68203 addresses cleanup bugs in the vivid_init() function of the Linux kernel's media vivid driver. The vulnerability involves a reference leak when platform_device_register() fails, due to missing calls to drop device references during error handling. Additionally, an incorrect cleanup call was fixed to properly unregister the platform driver when workqueue creation fails. These bugs were identified through static analysis and code inspection and have been fixed in specific Linux kernel commits.
References
- git.kernel.org/stable/c/ae6ccae32f51f788035d2c5cec898491dd7150ef (opens in a new tab)
- git.kernel.org/stable/c/4385092a86b94e1f332db35a3766108978c0722f (opens in a new tab)
- git.kernel.org/stable/c/1349af7f87df57940619f5b87990b799dac9ed8a (opens in a new tab)
- git.kernel.org/stable/c/6d51ad8f1c50c50d1abcc97fd243179967184c6a (opens in a new tab)
- git.kernel.org/stable/c/a07c179a92e949172ca52f6d4a13202ea88cd4b7 (opens in a new tab)