CVE-2026-68219

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before applying the setting to hardware. Otherwise, the process will not respond even when Ctrl+C is executed.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/28ae75dba701d7aa69a36802c398582933d3e0e6
https://git.kernel.org/stable/c/57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cf
https://git.kernel.org/stable/c/690cdda752f3dc6b7a8b2d4a243e0207b66a1f37
https://git.kernel.org/stable/c/75cdfaa7c908ca06d564170da9c80fb579f149a5
https://git.kernel.org/stable/c/ba7e1b06cbdad3b7c3314390cca22aff42f655d4

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-10 13:20

Updated : 2026-08-17 05:18

NVD link : CVE-2026-68219

Mitre link : CVE-2026-68219

CVE.ORG link : CVE-2026-68219

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-68219", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "cf21f328fcafacf4f96e7a30ef9dceede1076378", "lessThan": "690cdda752f3dc6b7a8b2d4a243e0207b66a1f37", "versionType": "git"}, {"status": "affected", "version": "cf21f328fcafacf4f96e7a30ef9dceede1076378", "lessThan": "ba7e1b06cbdad3b7c3314390cca22aff42f655d4", "versionType": "git"}, {"status": "affected", "version": "cf21f328fcafacf4f96e7a30ef9dceede1076378", "lessThan": "28ae75dba701d7aa69a36802c398582933d3e0e6", "versionType": "git"}, {"status": "affected", "version": "cf21f328fcafacf4f96e7a30ef9dceede1076378", "lessThan": "75cdfaa7c908ca06d564170da9c80fb579f149a5", "versionType": "git"}, {"status": "affected", "version": "cf21f328fcafacf4f96e7a30ef9dceede1076378", "lessThan": "57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cf", "versionType": "git"}], "programFiles": ["drivers/media/platform/nxp/imx8-isi/imx8-isi-core.h", "drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c", "drivers/media/platform/nxp/imx8-isi/imx8-isi-pipe.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.4"}, {"status": "unaffected", "version": "0", "lessThan": "6.4", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.148", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.101", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.42", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.6", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/media/platform/nxp/imx8-isi/imx8-isi-core.h", "drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c", "drivers/media/platform/nxp/imx8-isi/imx8-isi-pipe.c"], "defaultStatus": "affected"}]}], "published": "2026-08-10T13:20:09.897", "references": [{"url": "https://git.kernel.org/stable/c/28ae75dba701d7aa69a36802c398582933d3e0e6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/57a7ec5c9f38ce6c4d6209c4b75c8e57e1fea6cf", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/690cdda752f3dc6b7a8b2d4a243e0207b66a1f37", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/75cdfaa7c908ca06d564170da9c80fb579f149a5", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ba7e1b06cbdad3b7c3314390cca22aff42f655d4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: nxp: imx8-isi: Fix potential out-of-bounds issues\n\nThe maximum downscaling factor supported by ISI can be up to 16. Add\nminimum value constraint before applying the setting to hardware.\nOtherwise, the process will not respond even when Ctrl+C is executed."}], "lastModified": "2026-08-17T05:18:24.080", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}