EUVD-2026-55318

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Drain fillbuf on startstreaming failure pwcisocinit submits its isochronous URBs with usbsubmiturb.., GFPKERNEL in a loop. After the first URB is submitted, its completion handler pwcisochandler can run on another CPU...

CVE-2026-68216 media: pwc: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...

CVE-2026-68213 media: rtl2832_sdr: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

CVE-2026-68213 media: rtl2832_sdr: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

EUVD-2026-55312

In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffe...

CVE-2026-68211 media: stm32-dcmipp: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffe...

CVE-2026-68211

The CVE concerns the Linux kernel component media: stm32-dcmipp. The issue arises when start_streaming() fails after vb2 has handed buffers to the driver via buf_queue(); if those buffers aren’t returned with vb2_buffer_done(), vb2_start_streaming() may WARN_ON(owned_by_drv_count) and the buffers...

CVE-2026-68211 media: stm32-dcmipp: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffe...

CVE-2026-68209

The CVE-2026-68209 issue affects the Linux kernel sun4i-csi driver where, if start_streaming() fails, the vb2 framework does not return queued buffers, leading to buffer leaks and potential resource exhaustion. The root cause is that buffers queued via vb2_buffer_done() may not be returned before...

CVE-2026-68209 media: sun4i-csi: Return queued buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

CVE-2026-68135

The CVE-2026-68135 entry concerns the Linux kernel NIC driver hip04, where build_skb() failures in hip04_rx_poll() could bypass the release of the current RX buffer and its DMA mapping, causing resource leaks when a replacement buffer is installed. The fix keeps the current slot intact and return...

CVE-2026-68135 net: hip04: fix RX buffer leak on build_skb failure

In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on buildskb failure When buildskb fails in hip04rxpoll, the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrit...

EUVD-2026-55516

In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on buildskb failure When buildskb fails in hip04rxpoll, the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrit...

PT-2026-69631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the airspy media component where queued buffers leak if the airspy start streaming function returns an error. This occurs when the USB device is disconnected s-udev ==...

PT-2026-69609

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sun4i-csi media component where queued buffers leak if the sun4i csi start streaming function returns an error without returning those buffers via vb2 buffer done...

CVE-2026-68213: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

CVE-2026-68216: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...

CVE-2026-68135: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on buildskb failure When buildskb fails in hip04rxpoll, the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrit...

PT-2026-69622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the msi2500 driver where the msi2500 start streaming function fails to return queued buffers when an error occurs. The vb2 framework provides buffers via buf queue...

Linux Distros Unpatched Vulnerability : CVE-2026-68216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: pwc: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If...