CVE-2026-68216: media: pwc: Return queued buffers on start_streaming() failure
In the Linux kernel, the following vulnerability has been resolved:
media: pwc: Return queued buffers on startstreaming() failure
The vb2 framework hands buffers to the driver via bufqueue() before calling startstreaming(). If startstreaming() returns an error without first returning those buffers via vb2bufferdone(), vb2startstreaming() fires WARNON(ownedbydrvcount) and the queued buffers leak.
pwc's startstreaming() had two early returns that hit this trap: -ENODEV when the USB device was already disconnected, and -ERESTARTSYS when mutexlockinterruptible() was interrupted by a signal. Call the existing pwccleanupqueuedbufs() helper with VB2BUFSTATEQUEUED before returning (matching the state already used by the pwcisocinit() error path in the same function).
This mirrors the uvcvideo fix in commit 4cf3b6fd54eb ("media: uvcvideo: Return queued buffers on startstreaming() failure").
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68216?
CVE-2026-68216 has a severity rating of 15, indicating a high level of risk.
How do I fix CVE-2026-68216?
To fix CVE-2026-68216, update your Linux kernel to the latest stable version that contains the security patch.
What impact does CVE-2026-68216 have on system security?
CVE-2026-68216 may lead to resource leakage and instability in media operations within the Linux kernel.
Is CVE-2026-68216 present in all Linux kernel versions?
CVE-2026-68216 affects specific versions of the Linux kernel; check your version to determine if it is vulnerable.
When was CVE-2026-68216 published?
CVE-2026-68216 was published on August 10, 2026.