diff --git a/RKBOOT/RV1106MINIALL_TB_DUAL_CAMERA_SC301IOT_SC230AI.ini b/RKBOOT/RV1106MINIALL_TB_DUAL_CAMERA_SC301IOT_SC230AI.ini
new file mode 100644
index 00000000..86e81f53
--- /dev/null
+++ b/RKBOOT/RV1106MINIALL_TB_DUAL_CAMERA_SC301IOT_SC230AI.ini
@@ -0,0 +1,32 @@
+[CHIP_NAME]
+NAME=RV1106
+[VERSION]
+MAJOR=1
+MINOR=1
+[CODE471_OPTION]
+NUM=1
+Path1=bin/rv11/rv1106_ddr_924MHz_tb_v1.12.bin
+Sleep=1
+[CODE472_OPTION]
+NUM=1
+Path1=bin/rv11/rv1106_usbplug_v1.07.bin
+[LOADER_OPTION]
+NUM=3
+LOADER1=FlashData
+LOADER2=Hpmcu
+LOADER3=FlashBoot
+FlashData=bin/rv11/rv1106_ddr_924MHz_tb_v1.12.bin
+Hpmcu=bin/rv11/rv1106_hpmcu_tb_dual_camera_sc301iot_sc230ai_v1.67.bin
+FlashBoot=bin/rv11/rv1106_spl_spi_nor_tb_v1.00.bin
+[LOADER2_PARAM]
+LOAD_ADDR=0x40000
+FLAG=0x10007
+[OUTPUT]
+PATH=rv1106_download_v1.12.106.bin
+IDB_PATH=rv1106_idblock_v1.12.100.img
+[SYSTEM]
+NEWIDB=true
+[FLAG]
+471_RC4_OFF=true
+RC4_OFF=true
+CREATE_IDB=true
diff --git a/RKBOOT/RV1106MINIALL_TB_DUAL_CAMERA_SC3338_SC3338.ini b/RKBOOT/RV1106MINIALL_TB_DUAL_CAMERA_SC3338_SC3338.ini
index da116dc1..5bd6701f 100644
--- a/RKBOOT/RV1106MINIALL_TB_DUAL_CAMERA_SC3338_SC3338.ini
+++ b/RKBOOT/RV1106MINIALL_TB_DUAL_CAMERA_SC3338_SC3338.ini
@@ -16,7 +16,7 @@ LOADER1=FlashData
 LOADER2=Hpmcu
 LOADER3=FlashBoot
 FlashData=bin/rv11/rv1106_ddr_924MHz_tb_v1.12.bin
-Hpmcu=bin/rv11/rv1106_hpmcu_tb_dual_camera_sc3338_sc3338_v1.66.bin
+Hpmcu=bin/rv11/rv1106_hpmcu_tb_dual_camera_sc3338_sc3338_v1.67.bin
 FlashBoot=bin/rv11/rv1106_spl_spi_nor_tb_v1.00.bin
 [LOADER2_PARAM]
 LOAD_ADDR=0x40000
diff --git a/RKBOOT/RV1106MINIALL_TB_SC230AI.ini b/RKBOOT/RV1106MINIALL_TB_SC230AI.ini
index e42deb95..ec86a99b 100644
--- a/RKBOOT/RV1106MINIALL_TB_SC230AI.ini
+++ b/RKBOOT/RV1106MINIALL_TB_SC230AI.ini
@@ -16,7 +16,7 @@ LOADER1=FlashData
 LOADER2=Hpmcu
 LOADER3=FlashBoot
 FlashData=bin/rv11/rv1106_ddr_924MHz_tb_v1.12.bin
-Hpmcu=bin/rv11/rv1106_hpmcu_tb_sc230ai_v1.66.bin
+Hpmcu=bin/rv11/rv1106_hpmcu_tb_sc230ai_v1.67.bin
 FlashBoot=bin/rv11/rv1106_spl_spi_nor_tb_v1.00.bin
 [LOADER2_PARAM]
 LOAD_ADDR=0x40000
diff --git a/RKBOOT/RV1106MINIALL_TB_SC3336_SC3338.ini b/RKBOOT/RV1106MINIALL_TB_SC3336_SC3338.ini
index a0c37798..709b3ea6 100644
--- a/RKBOOT/RV1106MINIALL_TB_SC3336_SC3338.ini
+++ b/RKBOOT/RV1106MINIALL_TB_SC3336_SC3338.ini
@@ -16,7 +16,7 @@ LOADER1=FlashData
 LOADER2=Hpmcu
 LOADER3=FlashBoot
 FlashData=bin/rv11/rv1106_ddr_924MHz_tb_v1.12.bin
-Hpmcu=bin/rv11/rv1106_hpmcu_tb_sc3336_sc3338_v1.66.bin
+Hpmcu=bin/rv11/rv1106_hpmcu_tb_sc3336_sc3338_v1.67.bin
 FlashBoot=bin/rv11/rv1106_spl_spi_nor_tb_v1.00.bin
 [LOADER2_PARAM]
 LOAD_ADDR=0x40000
diff --git a/RKBOOT/RV1106MINIALL_TB_SC4336.ini b/RKBOOT/RV1106MINIALL_TB_SC4336.ini
index 27bfe6f5..977ac80a 100644
--- a/RKBOOT/RV1106MINIALL_TB_SC4336.ini
+++ b/RKBOOT/RV1106MINIALL_TB_SC4336.ini
@@ -16,7 +16,7 @@ LOADER1=FlashData
 LOADER2=Hpmcu
 LOADER3=FlashBoot
 FlashData=bin/rv11/rv1106_ddr_924MHz_tb_v1.12.bin
-Hpmcu=bin/rv11/rv1106_hpmcu_tb_sc4336_v1.66.bin
+Hpmcu=bin/rv11/rv1106_hpmcu_tb_sc4336_v1.67.bin
 FlashBoot=bin/rv11/rv1106_spl_spi_nor_tb_v1.00.bin
 [LOADER2_PARAM]
 LOAD_ADDR=0x40000
diff --git a/bin/rv11/rv1106_hpmcu_tb_dual_camera_sc301iot_sc230ai_v1.67.bin b/bin/rv11/rv1106_hpmcu_tb_dual_camera_sc301iot_sc230ai_v1.67.bin
new file mode 100644
index 00000000..f06969da
Binary files /dev/null and b/bin/rv11/rv1106_hpmcu_tb_dual_camera_sc301iot_sc230ai_v1.67.bin differ
diff --git a/bin/rv11/rv1106_hpmcu_tb_dual_camera_sc3338_sc3338_v1.66.bin b/bin/rv11/rv1106_hpmcu_tb_dual_camera_sc3338_sc3338_v1.67.bin
similarity index 56%
rename from bin/rv11/rv1106_hpmcu_tb_dual_camera_sc3338_sc3338_v1.66.bin
rename to bin/rv11/rv1106_hpmcu_tb_dual_camera_sc3338_sc3338_v1.67.bin
index e6689d57..82581e91 100644
Binary files a/bin/rv11/rv1106_hpmcu_tb_dual_camera_sc3338_sc3338_v1.66.bin and b/bin/rv11/rv1106_hpmcu_tb_dual_camera_sc3338_sc3338_v1.67.bin differ
diff --git a/bin/rv11/rv1106_hpmcu_tb_sc230ai_v1.66.bin b/bin/rv11/rv1106_hpmcu_tb_sc230ai_v1.67.bin
similarity index 53%
rename from bin/rv11/rv1106_hpmcu_tb_sc230ai_v1.66.bin
rename to bin/rv11/rv1106_hpmcu_tb_sc230ai_v1.67.bin
index 6a91fdad..817d56c9 100644
Binary files a/bin/rv11/rv1106_hpmcu_tb_sc230ai_v1.66.bin and b/bin/rv11/rv1106_hpmcu_tb_sc230ai_v1.67.bin differ
diff --git a/bin/rv11/rv1106_hpmcu_tb_sc3336_sc3338_v1.66.bin b/bin/rv11/rv1106_hpmcu_tb_sc3336_sc3338_v1.67.bin
similarity index 54%
rename from bin/rv11/rv1106_hpmcu_tb_sc3336_sc3338_v1.66.bin
rename to bin/rv11/rv1106_hpmcu_tb_sc3336_sc3338_v1.67.bin
index bb5af8f2..ac0ac2bf 100644
Binary files a/bin/rv11/rv1106_hpmcu_tb_sc3336_sc3338_v1.66.bin and b/bin/rv11/rv1106_hpmcu_tb_sc3336_sc3338_v1.67.bin differ
diff --git a/bin/rv11/rv1106_hpmcu_tb_sc4336_v1.66.bin b/bin/rv11/rv1106_hpmcu_tb_sc4336_v1.67.bin
similarity index 54%
rename from bin/rv11/rv1106_hpmcu_tb_sc4336_v1.66.bin
rename to bin/rv11/rv1106_hpmcu_tb_sc4336_v1.67.bin
index c752a4b6..7fda516a 100644
Binary files a/bin/rv11/rv1106_hpmcu_tb_sc4336_v1.66.bin and b/bin/rv11/rv1106_hpmcu_tb_sc4336_v1.67.bin differ
diff --git a/doc/release/RV1106_CN.md b/doc/release/RV1106_CN.md
index 7fb99385..bd94071e 100644
--- a/doc/release/RV1106_CN.md
+++ b/doc/release/RV1106_CN.md
@@ -1,5 +1,19 @@
 # RV1106 Release Note
 
+## rv1106_hpmcu_tb_{sc230ai,sc3338,sc4336,dual_sc3338,dual_sc301iot_sc230ai}_v1.67.bin
+
+| 时间       | 文件                                                         | 编译 commit                                     | 重要程度 |
+| ---------- | :----------------------------------------------------------- | ----------------------------------------------- | -------- |
+| 2023-06-21 | rv1106_hpmcu_tb_{sc230ai,sc3338,sc4336,dual_sc3338,dual_sc301iot_sc230ai}_v1.67.bin | rtt:f047d6a191#hal:d93ef9fd#battery_ipc:68c599d | 重要     |
+
+### Fixed
+
+| Index | 重要程度 | 更新说明                         | 问题现象                                             | 问题来源 |
+| ----- | -------- | -------------------------------- | ---------------------------------------------------- | -------- |
+| 1     | 重要     | 修复野指针 | 解决双摄引起内核无法启动 | -        |
+
+------
+
 ## rv1106_hpmcu_tb_{sc230ai,sc3338,sc4336,dual_sc3338}_v1.66.bin
 
 | 时间       | 文件                                                         | 编译 commit                                    | 重要程度 |
diff --git a/doc/release/RV1106_EN.md b/doc/release/RV1106_EN.md
index 20974a62..cdf33351 100644
--- a/doc/release/RV1106_EN.md
+++ b/doc/release/RV1106_EN.md
@@ -1,5 +1,19 @@
 # RV1106 Release Note
 
+## rv1106_hpmcu_tb_{sc230ai,sc3338,sc4336,dual_sc3338,dual_sc301iot_sc230ai}_v1.67.bin
+
+| Date       | File                                                         | Build commit                                   | Severity |
+| ---------- | :----------------------------------------------------------- | ---------------------------------------------- | -------- |
+| 2023-06-21 | rv1106_hpmcu_tb_{sc230ai,sc3338,sc4336,dual_sc3338,dual_sc301iot_sc230ai}_v1.67.bin | rtt:f047d6a191#hal:d93ef9fd#battery_ipc:68c599d | important  |
+
+### Fixed
+
+| Index | Severity  | Update                       | Issue description                                                  | Issue source |
+| ----- | --------- | --------------------------   | ----------------------------------------                           | ------------ |
+| 1     | important | Fixes null ptr | Resolve  kernel can't startup on dual cameras scenario | -        |
+
+------
+
 ## rv1106_hpmcu_tb_{sc230ai,sc3338,sc4336,dual_sc3338}_v1.66.bin
 
 | Date       | File                                                         | Build commit                                   | Severity |