177 matches found
CVE-2026-68228
A flaw was found in the Linux kernel's media subsystem, specifically within the wave5 encoder. A local user could exploit a race condition during encoder processing, where a buffer is returned to userspace before being fully removed from the ready queue. This could lead to a corrupted buffer list...
CVE-2026-68213
A flaw was found in the Linux kernel's media subsystem, specifically within the rtl2832sdr driver. When the startstreaming function encounters an error, it fails to properly return buffers that were previously queued. This oversight can lead to a memory leak, potentially resulting in resource...
CVE-2026-68208
A flaw was found in the Linux kernel's media subsystem ti: vpe. An incorrect error check in the vipprobeslice function, specifically when handling memory allocation failures from devmkzalloc, could lead to a denial of service. A local attacker could potentially exploit this to cause system...
media: rtl2832: fix use-after-free in rtl2832_remove()
...
media: vivid: check for vb2_is_busy() when toggling caps
...
media: pwc: Drain fill_buf on start_streaming() failure
...
media: pci: dm1105: Free allocated workqueue
...
media: ti: vpe: unwind v4l2 device registration on probe error
...
media: airspy: Return queued buffers on start_streaming() failure
...
media: radio-si476x: Unregister v4l2_device on probe failure
...
media: v4l2-ctrls: validate HEVC active reference counts
...
media: stm32: dcmi: unregister notifier on probe failure
...
DEBIAN-CVE-2026-68220
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Add missing v4l2subdevcleanup in crossbar and pipe Both mxcisicrossbarinit and mxcisipipeinit call v4l2subdevinitfinalize which allocates the subdev active state, but neither mxcisicrossbarcleanup nor...
CVE-2026-68211
In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffe...
UBUNTU-CVE-2026-68224
In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function returns either a valid pointer or an ERRPTR on failure -ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found. The...
UBUNTU-CVE-2026-68208
In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devmkzalloc in vipprobeslice In vipprobeslice, the error check for devmkzalloc incorrectly uses PTRERRORZERO which returns 0 for NULL pointer. Return -ENOMEM for devmkzalloc failure...
UBUNTU-CVE-2026-68225
In the Linux kernel, the following vulnerability has been resolved: media: i2c: alvium: fix critical pointer access in alviumctrlinit The current implementation of alviumctrlinit creates several controls in function alviumctrlinit and uses the returned pointer without check. That can cause write...
UBUNTU-CVE-2026-68222
In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers vi...
CVE-2026-68225
In the Linux kernel, the following vulnerability has been resolved: media: i2c: alvium: fix critical pointer access in alviumctrlinit The current implementation of alviumctrlinit creates several controls in function alviumctrlinit and uses the returned pointer without check. That can cause write...
UBUNTU-CVE-2026-68216
In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...