SB20260812319 - Improper Check or Handling of Exceptional Conditions in Linux kernel pci saa7134 driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-68212)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper exception handling in saa7134_video_init1 in the saa7134 video driver when probing a device and initializing video and VBI queues. A local user can trigger initialization failures that leave allocated resources unreleased and may result in use of uninitialized DMA resources to cause a denial of service.

The issue occurs during device probing before the device is fully registered, so the normal cleanup path is not executed.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/134c979dd721e22f196d71026432ee37d1f5cc38
• https://git.kernel.org/stable/c/1731dd61b6c0b7435c139951d2b7eada6c9667a8
• https://git.kernel.org/stable/c/b7936e8cbec1b96b126058eeb005e5b9111df38e
• https://git.kernel.org/stable/c/e1ef361ee31d1dba5dcae2cdd50f9c1352df0c23
• https://git.kernel.org/stable/c/f86ed548386e3050e5f8f25b450d09dc009d9a88