CVE-2026-68211

In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffe...

CVE-2026-68231

The CVE-2026-68231 issue affects the Linux kernel media stack, specifically the airspy driver under vb2. It occurs when start_streaming() returns an error without draining buffers that were already queued via buf_queue(); this can leave buffers leaked and trigger a WARN_ON(owned_by_drv_count) in ...

PT-2026-69613

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the rtl2832 sdr driver within the media subsystem. The vb2 framework provides buffers to the driver via buf queue before calling start streaming. If the rtl2832 s...

PT-2026-69616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the pwc media component when the start streaming function returns an error without returning queued buffers via vb2 buffer done. This happens during two specific...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: fix listdel corruption If the ticsi2rxstartdma function fails in the ticsi2rxdmacallback, the buffer is marked as completed with VB2BUFSTATEERROR, but is not removed from the DMA queue. This causes the sa...

PT-2018-8528

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to a lack of synchronization between msm vb2 buffer operations in t...