{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  media: stm32: dcmi: fix some error handling bugs in probe()  There are a few issues here:  1) After we assign:         chan = dma_request_chan(\u0026pdev-\u003edev, \"tx\");    Then the error paths need to clean up before returning.  The first    error path does a direct return. 2) The error paths check \"dcmi-\u003emdma_chan\" but that is not assigned    until later so it results in memory leaks.  Test \"mdma_chan\"    instead. 3) The error handling calls dma_release_channel(dcmi-\u003edma_chan) before    \"dcmi-\u003edma_chan\" has been assigned which leads to a NULL pointer    dereference.  Use the \"chan\" variable instead.  I also moved the call to dma_release_channel() after the call to dma_release_channel() so it mirrors the allocation code better.",
  "id": "DEBIAN-CVE-2026-90405",
  "modified": "2026-09-18T04:47:32.608936738Z",
  "published": "2026-09-17T17:17:40.357Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-90405"
    }
  ],
  "upstream": [
    "CVE-2026-90405"
  ]
}