Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the reuse of memory after the em28xxv4l2open function in the media em28xx module. This could lead...

AZL-83378 CVE-2026-31473 affecting package kernel for versions less than 6.6.134.1-2

In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with reqqueuemutex MEDIAREQUESTIOCREINIT can run concurrently with VIDIOCREQBUFS0 queue teardown paths. This can race request object cleanup against vb2 queue cancellation and lead to...

CVE-2026-31473: Use After Free

In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with reqqueuemutex MEDIAREQUESTIOCREINIT can run concurrently with VIDIOCREQBUFS0 queue teardown paths. This can race request object cleanup against vb2 queue cancellation and lead to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013637)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013637 advisory. In the Linux kernel, the following vulnerability has been resolved: media: max9286: Fix memleak in max9286v4l2register There is a kmemleak when testing the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-006959)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006959 advisory. In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter numrdy Getting below error when using KCSAN to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011160 advisory. In the Linux kernel, the following vulnerability has been resolved: media: max9286: Fix memleak in max9286v4l2register There is a kmemleak when testing the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011062)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011062 advisory. In the Linux kernel, the following vulnerability has been resolved: media: ov5675: Fix memleak in ov5675initcontrols There is a kmemleak when testing the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006773 advisory. In the Linux kernel, the following vulnerability has been resolved: media: tc358743: register v4l2 async device only after successful setup Ensure the device has bee...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006757 advisory. In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter numrdy Getting below error when using KCSAN to...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006618 advisory. In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter numrdy Getting below error when using KCSAN to...

Linux kernel multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the v4l2fwnodeparselink function in the drivers/media/v4l2-core/v4l2-fwnode.c file of the Linux multimedia device driver is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

drivers/staging/media/ipu3/ipu3-v4l2.c Heap Buffer Overflow

The vulnerability of the imgusubdevgetselection function in the drivers/staging/media/ipu3/ipu3-v4l2.c driver for Linux kernel data preparation involves pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2026-0117

In mfcdecdqbuf of mfcdecv4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-34935

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the em28xx driver. The function em28xx v4l2 open reads the dev-v4l2 variable without holding the dev-lock, which creates a race condition with the error...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-1313)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : scsi: mpt3sas: Fix crash in transport port remove by using iocinfoCVE-2025-40115 scsi: target: Fix WRITESAME No Data Buffer crashCVE-2022-21546...

Linux videobuf2 Kernel Buffer Overflow DoS

The vulnerability of the vb2ioctlremovebufs function in the drivers/media/common/videobuf2/videobuf2-v4l2.c kernel module of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause...

CVE-2026-0117

In mfcdecdqbuf of mfcdecv4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ROS-20260304-73-0026

A vulnerability in the v4l2rectmapinside function of the Linux kernel is related to memory reads outside of the allocated buffer. Exploitation of the vulnerability may allow an attacker acting remotely to affect the confidentiality of protected information...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27077)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27077 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: fix a memle...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50056)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50056 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix ERRPTR dereference...