CVE-2026-68219
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In the Linux kernel, the nxp imx8-isi driver fixed potential out-of-bounds issues. The maximum downscaling factor supported by ISI can be up to 16. Added a minimum value constraint before applying the setting to hardware to prevent the process from becoming unresponsive.
Risk Assessment
Lack of constraint can lead to system hang or unpredictable driver behavior, potentially affecting service availability.
Recommendation
It is recommended to update the Linux kernel to a version containing the fix for CVE-2026-68219.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before applying the setting to hardware. Otherwise, the process will not respond even when Ctrl+C is executed.