CVE-2026-68204

CVE-2026-68204 affects the Linux kernel media subsystem (vivid driver). The vulnerability arises because vivid_update_format_cap/out() may be invoked to change formats while the capture/output queue is still busy, due to missing vb2_is_busy() checks when toggling CROP/COMPOSE/SCALE capabilities. ...

CVE-2024-50288

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix buffer overwrite when using 32 buffers The maximum number of buffers that can be requested was increased to 64 for the video capture queue. But video capture used a mustblank array that was still sized for 32...

SUSE CVE-2024-50288

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix buffer overwrite when using 32 buffers The maximum number of buffers that can be requested was increased to 64 for the video capture queue. But video capture used a mustblank array that was still sized for 32...

DEBIAN-CVE-2024-50288

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix buffer overwrite when using 32 buffers The maximum number of buffers that can be requested was increased to 64 for the video capture queue. But video capture used a mustblank array that was still sized for 32...