CVE-2026-68225

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68225", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.375Z", "datePublished": "2026-08-10T12:00:47.085Z", "dateUpdated": "2026-08-17T05:01:13.016Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:01:13.016Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: alvium: fix critical pointer access in alvium_ctrl_init\n\nThe current implementation of alvium_ctrl_init creates several controls in\nfunction alvium_ctrl_init and uses the returned pointer without check. That\ncan cause write access over NULL-pointer for several controls. The reworked\ncode checks the pointers before adding flags."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/i2c/alvium-csi2.c"], "versions": [{"version": "0a7af872915ee34668edf7e4018648a226d9e7f9", "lessThan": "4bacfda44d36f165f6cb57bea408912886400ffa", "status": "affected", "versionType": "git"}, {"version": "0a7af872915ee34668edf7e4018648a226d9e7f9", "lessThan": "7337c88205ed0ffc654f40266be0d3c3eb15fb29", "status": "affected", "versionType": "git"}, {"version": "0a7af872915ee34668edf7e4018648a226d9e7f9", "lessThan": "eb2f934646aefb06314cecd1deb020794829b207", "status": "affected", "versionType": "git"}, {"version": "0a7af872915ee34668edf7e4018648a226d9e7f9", "lessThan": "4f6f28ff24709710c08557c127b3e4c3fb1b4159", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/i2c/alvium-csi2.c"], "versions": [{"version": "6.8", "status": "affected"}, {"version": "0", "lessThan": "6.8", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.6", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "7.1.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/4bacfda44d36f165f6cb57bea408912886400ffa"}, {"url": "https://git.kernel.org/stable/c/7337c88205ed0ffc654f40266be0d3c3eb15fb29"}, {"url": "https://git.kernel.org/stable/c/eb2f934646aefb06314cecd1deb020794829b207"}, {"url": "https://git.kernel.org/stable/c/4f6f28ff24709710c08557c127b3e4c3fb1b4159"}], "title": "media: i2c: alvium: fix critical pointer access in alvium_ctrl_init", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/media/i2c/alvium-csi2.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "4bacfda44d36f165f6cb57bea408912886400ffa", "status": "affected", "version": "0a7af872915ee34668edf7e4018648a226d9e7f9", "versionType": "git"}, {"lessThan": "7337c88205ed0ffc654f40266be0d3c3eb15fb29", "status": "affected", "version": "0a7af872915ee34668edf7e4018648a226d9e7f9", "versionType": "git"}, {"lessThan": "eb2f934646aefb06314cecd1deb020794829b207", "status": "affected", "version": "0a7af872915ee34668edf7e4018648a226d9e7f9", "versionType": "git"}, {"lessThan": "4f6f28ff24709710c08557c127b3e4c3fb1b4159", "status": "affected", "version": "0a7af872915ee34668edf7e4018648a226d9e7f9", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/media/i2c/alvium-csi2.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.8"}, {"lessThan": "6.8", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.42", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: alvium: fix critical pointer access in alvium_ctrl_init\n\nThe current implementation of alvium_ctrl_init creates several controls in\nfunction alvium_ctrl_init and uses the returned pointer without check. That\ncan cause write access over NULL-pointer for several controls. The reworked\ncode checks the pointers before adding flags."}], "id": "CVE-2026-68225", "lastModified": "2026-08-17T05:18:24.740", "metrics": {}, "published": "2026-08-10T13:20:10.687", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4bacfda44d36f165f6cb57bea408912886400ffa"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4f6f28ff24709710c08557c127b3e4c3fb1b4159"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7337c88205ed0ffc654f40266be0d3c3eb15fb29"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/eb2f934646aefb06314cecd1deb020794829b207"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: media: i2c: alvium: fix critical pointer access in alvium_ctrl_init", "id": "2513431", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513431"}, "csaw": false, "cwe": "CWE-476", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nmedia: i2c: alvium: fix critical pointer access in alvium_ctrl_init\nThe current implementation of alvium_ctrl_init creates several controls in\nfunction alvium_ctrl_init and uses the returned pointer without check. That\ncan cause write access over NULL-pointer for several controls. The reworked\ncode checks the pointers before adding flags.", "A flaw was found in the Linux kernel's media I2C Alvium driver. The `alvium_ctrl_init` function, responsible for initializing controls, does not properly check if pointers are valid before using them. This can lead to the system attempting to write data to an invalid memory location, which could allow a local attacker to cause a system crash and result in a denial of service."], "name": "CVE-2026-68225", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-10T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68225\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68225\nhttps://lore.kernel.org/linux-cve-announce/2026081015-CVE-2026-68225-b676@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0a7af872915ee34668edf7e4018648a226d9e7f9,4bacfda44d36f165f6cb57bea408912886400ffa)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0a7af872915ee34668edf7e4018648a226d9e7f9,7337c88205ed0ffc654f40266be0d3c3eb15fb29)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0a7af872915ee34668edf7e4018648a226d9e7f9,eb2f934646aefb06314cecd1deb020794829b207)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0a7af872915ee34668edf7e4018648a226d9e7f9,4f6f28ff24709710c08557c127b3e4c3fb1b4159)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.8"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.101,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.42,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.6,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T15:00:03.822725+00:00", "updated": "2026-08-10T18:30:04.126792+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-476", "CWE-787"]}