Skip to main content

Linux Kernel EUVDEUVD-2026-55320

| CVE-2026-68219 HIGH
2026-08-10 Linux GHSA-6p56-xj79-w693
Buffer Overflow Linux Suse
7.8
CVSS 3.1 · Vendor: Linux
Share

Severity by source

Vendor (Linux) PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
7.8 HIGH

Local access with low privilege aligns with device node access requirements; high C/I/A reflects plausible kernel memory corruption impact from the out-of-bounds write.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
SUSE
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Red Hat
5.5 MEDIUM
qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Analysis Generated
Aug 14, 2026 - 03:32 vuln.today
CVSS changed
Aug 13, 2026 - 23:37 NVD
7.8 (HIGH)
Patch available
Aug 10, 2026 - 14:18 EUVD
CVE Published
Aug 10, 2026 - 12:00 cve.org
HIGH 7.8
CVE Published
Aug 10, 2026 - 12:00 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

media: nxp: imx8-isi: Fix potential out-of-bounds issues

The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before applying the setting to hardware. Otherwise, the process will not respond even when Ctrl+C is executed.

AnalysisAI

Out-of-bounds memory access in the Linux kernel's NXP i.MX8 ISI (Image Sensing Interface) media driver enables a local low-privileged attacker to corrupt kernel memory or freeze the system, with CVSS-assessed high impact across confidentiality, integrity, and availability. The flaw stems from missing minimum-value validation on the hardware downscaling factor - the ISI supports up to 16x downscaling, but no floor check is enforced before writing values to hardware registers, resulting in invalid hardware state and a kernel-level process freeze that survives Ctrl+C. No public exploit code has been identified and EPSS sits at 0.21% (11th percentile), reflecting the hardware-specific nature of the attack surface.

Technical ContextAI

The NXP i.MX8 ISI (Image Sensing Interface) is a dedicated image scaling and format conversion hardware block embedded in NXP's i.MX8 SoC family, commonly used in embedded Linux platforms for camera pipelines and video processing. The Linux kernel driver for this subsystem (under drivers/media/platform/nxp/imx8-isi/) configures ISI hardware registers directly from kernel space. The ISI hardware supports a maximum downscaling ratio of 16x, but the driver lacked a lower-bound (minimum value) constraint check before writing the scaling configuration to hardware. Submitting an out-of-range value causes the hardware to enter an undefined state, making the process unresponsive to SIGINT (Ctrl+C) - indicative of a kernel-level hang. Although no CWE is formally assigned, the 'Buffer Overflow' tag and the out-of-bounds framing in the description point to a CWE-125 (Out-of-bounds Read) or CWE-787 (Out-of-bounds Write) class root cause in driver input validation. CPE cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* identifies the Linux kernel as the affected codebase, introduced from commit cf21f328fcafacf4f96e7a30ef9dceede1076378.

RemediationAI

The primary remediation is upgrading to a patched kernel version. Fixed releases are available across multiple stable branches: 6.6.148, 6.12.101, 6.18.42, 7.1.6, and 7.2-rc1. Embedded product teams maintaining downstream kernels should backport the relevant fix commit for their branch from the upstream stable trees at https://git.kernel.org/stable/. For systems where an immediate kernel upgrade is not feasible, a compensating control is to prevent unprivileged users from accessing the ISI media device node - restrict /dev/video* permissions via udev rules or remove the imx8-isi kernel module (modprobe -r) if camera/ISI functionality is not required. Restricting module access eliminates the attack surface entirely but disables ISI hardware functionality. There are no known other workarounds that preserve ISI functionality while mitigating the vulnerability. No formal vendor advisory URL beyond the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-68219) and kernel stable commits has been identified.

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 16.0 Affected

Share

EUVD-2026-55320 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy