Riskcovery

CVE-2026-43223

media: pvrusb2: fix URB leak in pvr2_send_request_ex

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: pvrusb2: fix URB leak in pvr2_send_request_ex

When pvr2_send_request_ex() submits a write URB successfully but fails to submit the read URB (e.g. returns -ENOMEM), it returns immediately without waiting for the write URB to complete. Since the driver reuses the same URB structure, a subsequent call to pvr2_send_request_ex() attempts to submit the still-active write URB, triggering a 'URB submitted while active' warning in usb_submit_urb().

Fix this by ensuring the write URB is unlinked and waited upon if the read URB submission fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d855497edbfbf9e19a17f4a1154bca69cb4bd9ba to before da524c939b1e5ba17f10db4bde4bdaf569ffcda6Affected
  • d855497edbfbf9e19a17f4a1154bca69cb4bd9ba to before cf459d6ffa5e150ef3744b897f936ff24b52bd15Affected
  • d855497edbfbf9e19a17f4a1154bca69cb4bd9ba to before 77a63f8efc434ddb04667ed632aade58301a2f13Affected
  • d855497edbfbf9e19a17f4a1154bca69cb4bd9ba to before 4ba5c7a1aade7090172cbffd4d120bf4cf5ccbdeAffected
  • d855497edbfbf9e19a17f4a1154bca69cb4bd9ba to before 58dd722b6c3debcddb4684fb256c90fee7f063e5Affected
  • d855497edbfbf9e19a17f4a1154bca69cb4bd9ba to before 2011929f0e4cf6a0a34dd6205911b12276904453Affected
  • d855497edbfbf9e19a17f4a1154bca69cb4bd9ba to before 5f3ac816861c3b8a5d1a3645b17dc3a99d668d94Affected
  • d855497edbfbf9e19a17f4a1154bca69cb4bd9ba to before a8333c8262aed2aedf608c18edd39cf5342680a7Affected
LinuxLinux
  • 2.6.18Affected
  • before 2.6.18Not affected
  • 5.10.252 through 5.10.*Not affected
  • 5.15.202 through 5.15.*Not affected
  • 6.1.165 through 6.1.*Not affected
  • 6.6.128 through 6.6.*Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.