CVE-2026-68228

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to userspace via v4l2m2mbufdone call. In this time, userspace could que...

CVE-2026-68228

The CVE-2026-68228 entry concerns the Linux kernel media subsystem (chips-media wave5 encoder). A race condition allows a buffer to be marked as DONE while it has not yet been removed from the m2m ready queue, because an IRQ path can return the buffer to userspace via v4l2_m2m_buf_done before sta...

CVE-2026-68228 media: chips-media: wave5: Move src_buf Removal to finish_encode

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to userspace via v4l2m2mbufdone call. In this time, userspace could que...

CVE-2026-53380

In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buffers rzv2hivc::buffers.queue is protected by a spinlock rzv2hivc::buffers.lock. However, in rzv2hivctransferbuffer, which runs in a separate workqueue, the listde...

CVE-2026-53380

In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buffers rzv2hivc::buffers.queue is protected by a spinlock rzv2hivc::buffers.lock. However, in rzv2hivctransferbuffer, which runs in a separate workqueue, the listde...

CVE-2025-40302 media: videobuf2: forbid remove_bufs when legacy fileio is active

In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid removebufs when legacy fileio is active vb2ioctlremovebufs call manipulates queue internal buffer list, potentially overwriting some pointers used by the legacy fileio access mode. Forbid that ioctl when...

PT-2025-49434

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s videobuf2 subsystem. The vb2 ioctl remove bufs function can manipulate the internal buffer list of a queue, potentially overwriting pointers used when...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fbdev hypervfb module not properly handling frame buffer removal...

AZL-54131 CVE-2024-53131 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blocktouchbuffer tracepoint Patch series "nilfs2: fix null-ptr-deref bugs on block tracepoints". This series fixes null pointer dereference bugs that occur when using nilfs2 and two block-related...

AZL-47983 CVE-2024-41088 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: can: mcp251xfd: fix infinite loop when xmit fails When the mcp251xfdstartxmit function fails, the driver stops processing messages, and the interrupt routine does not return, running indefinitely even after killing the running...

kernel: Linux kernel: Memory leak in io_uring can lead to denial of service

A flaw was found in the Linux kernel's iouring subsystem. When removing provided buffers, the system fails to properly dispose of iobuffer structures, leading to a memory leak. A local attacker could exploit this vulnerability to cause a denial of service DoS due to memory exhaustion...