Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework passes buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffer...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued buffers on startstreaming failure The vb2 framework passes buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers v...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on startstreaming failure The vb2 framework passes buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Drain fillbuf on startstreaming failure pwcisocinit submits its isochronous URBs via usbsubmiturb.., GFPKERNEL in a loop. After the first URB is submitted, its completion handler pwcisochandler can run on another CPU...

CVE-2026-97232

The volotat Anagnorisis software (versions up to 0.4.2 ) is vulnerable to a path traversal vulnerability. The flaw exists within the get_file_content , save_file_content , move_files , and start_streaming functions of the page.html file. This vulnerability allows for remote attack initiation, and...

CVE-2026-97232 volotat Anagnorisis page.html start_streaming path traversal

A vulnerability was determined in volotat Anagnorisis up to 0.4.2. Affected by this vulnerability is the function getfilecontent/savefilecontent/movefiles/startstreaming of the file page.html. This manipulation causes path traversal. The attack can be initiated remotely. The exploit has been...

AZL-101604 CVE-2026-89880 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: release URBs and stream buffers on startstreaming failure rtl2832sdrstartstreaming calls rtl2832sdrallocstreambufs, rtl2832sdrallocurbs and rtl2832sdrsubmiturbs in sequence and shares a single err: label that...

CVE-2026-89880

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: release URBs and stream buffers on startstreaming failure rtl2832sdrstartstreaming calls rtl2832sdrallocstreambufs, rtl2832sdrallocurbs and rtl2832sdrsubmiturbs in sequence and shares a single err: label that...

DEBIAN-CVE-2026-89880

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: release URBs and stream buffers on startstreaming failure rtl2832sdrstartstreaming calls rtl2832sdrallocstreambufs, rtl2832sdrallocurbs and rtl2832sdrsubmiturbs in sequence and shares a single err: label that...

CVE-2026-89880

CVE-2026-89880 affects the Linux kernel rtl2832_sdr media driver (Realtek RTL2832 USB SDR radio). The root cause is a missing teardown on the error path of rtl2832_sdr_start_streaming(): when URB submission or allocation fails after stream buffers are allocated, the URBs and coherent DMA buffers ...

CVE-2026-89880 media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: release URBs and stream buffers on startstreaming failure rtl2832sdrstartstreaming calls rtl2832sdrallocstreambufs, rtl2832sdrallocurbs and rtl2832sdrsubmiturbs in sequence and shares a single err: label that...

CVE-2026-89880 media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: release URBs and stream buffers on startstreaming failure rtl2832sdrstartstreaming calls rtl2832sdrallocstreambufs, rtl2832sdrallocurbs and rtl2832sdrsubmiturbs in sequence and shares a single err: label that...

SUSE CVE-2026-68231

In the Linux kernel, the following vulnerability has been resolved: media: airspy: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...

SUSE CVE-2026-68222

In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers vi...

SUSE CVE-2026-68209

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

SUSE CVE-2026-68211

In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffe...

SUSE CVE-2026-68213

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832sdr: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

SUSE CVE-2026-68216

In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers via...

CVE-2026-68216

A flaw was found in the Linux kernel's pwc media driver. When the startstreaming function fails, it does not properly return queued buffers, leading to a resource leak. This can occur if the USB device is disconnected or if a mutex lock is interrupted. A local attacker could potentially exploit...

CVE-2026-68213

A flaw was found in the Linux kernel's media subsystem, specifically within the rtl2832sdr driver. When the startstreaming function encounters an error, it fails to properly return buffers that were previously queued. This oversight can lead to a memory leak, potentially resulting in resource...