# CVE-2026-46222: linux: In the Linux kernel, the following vulnerability has been resolved:  media: rockchip: rkcif: Add missing MUST_CONNECT...

CVE-2026-46222 is fixed in linux on 1 platform by DEBIAN-CVE-2026-46222 (version 7.0.9-1), released June 24, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-46222
- Priority: Routine
- CVSS: 5.5 (medium)
- EPSS: 0.0011
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 28, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:  media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads  The pads missed checks for connected devices which may a null dereference when the stream is enabled.  Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 pc : rkcif_interface_enable_streams+0x48/0xf0 lr : rkcif_interface_enable_streams+0x44/0xf0 Call trace:  rkcif_interface_enable_streams+0x48/0xf0  v4l2_subdev_enable_streams+0x26c/0x3f0  rkcif_stream_start_streaming+0x140/0x278  vb2_start_streaming+0x74/0x188  vb2_core_streamon+0xe0/0x1d8  vb2_ioctl_streamon+0x60/0xa8  v4l_streamon+0x2c/0x40  __video_do_ioctl+0x34c/0x400  video_usercopy+0x2d0/0x800  video_ioctl2+0x20/0x60  v4l2_ioctl+0x48/0x78

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 14 | 7.0.9-1 | [DEBIAN-CVE-2026-46222](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46222.md) | Jun 24, 2026 |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.