Description
In the Linux kernel, the following vulnerability has been resolved:

media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice()

In vip_probe_slice(), the error check for devm_kzalloc() incorrectly
uses PTR_ERR_OR_ZERO() which returns 0 for NULL pointer.

Return -ENOMEM for devm_kzalloc() failure.
Published: 2026-08-10
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Based on the description, it is inferred that the media driver for TI VPE contains a flaw in the function vip_probe_slice(). The code checks the result of devm_kzalloc() with PTR_ERR_OR_ZERO(), which incorrectly treats a NULL pointer as zero rather than an error code. This incorrect check could result in the function proceeding with a NULL pointer, potentially leading to a kernel crash or local denial of service.

Affected Systems

The affected component is the TI Video Processing Engine (VPE) driver within the Linux kernel’s media subsystem. No specific kernel versions are listed, so all kernels that include the unpatched VPE driver code are potentially impacted. Since the bug is in the internal driver logic, typical end‑users do not see a user‑level error message.

Risk and Exploitability

The CVSS score is 5.5, EPSS is less than 1%, and the vulnerability is not listed in CISA KEV, indicating a moderate but not high priority threat. The attack vector is inferred to be local, requiring an attacker to load the kernel module or trigger media processing that exercises vip_probe_slice(). If an attacker can force a failed allocation, the kernel may crash, allowing for denial of service but not remote code execution.

Generated by OpenCVE AI on August 13, 2026 at 07:17 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that includes the patch for the devm_kzalloc error check. The patch commits can be found at the referenced git URLs.
  • If an official kernel update is not available, rebuild the kernel or the media driver with the approved commit "956879b173c2cf782fbc3d18947fd1da286359cf" or "e8f319eae96a3d718e810d52432020a2b77f5f60" applied.
  • If an immediate kernel update or patch is not feasible, disable the TI VPE media driver to prevent the vulnerable code from executing until a fix is applied.

Generated by OpenCVE AI on August 13, 2026 at 07:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 12 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Mon, 10 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice() In vip_probe_slice(), the error check for devm_kzalloc() incorrectly uses PTR_ERR_OR_ZERO() which returns 0 for NULL pointer. Return -ENOMEM for devm_kzalloc() failure.
Title media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-17T05:00:52.557Z

Reserved: 2026-07-30T09:28:09.374Z

Link: CVE-2026-68208

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-10T13:20:08.523

Modified: 2026-08-17T05:18:22.850

Link: CVE-2026-68208

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-10T12:00:27Z

Links: CVE-2026-68208 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-13T07:30:06Z

Weaknesses