Riskcovery

CVE-2026-43290

media: uvcvideo: Return queued buffers on start_streaming() failure

State
Published
Severity
7.8 High
Published
May 8, 2026
Updated
Aug 5, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: uvcvideo: Return queued buffers on start_streaming() failure

Return buffers if streaming fails to start due to uvc_pm_get() error.

This bug may be responsible for a warning I got running

while :; do yavta -c3 /dev/video0; done

on an xHCI controller which failed under this workload. I had no luck reproducing this warning again to confirm.

xhci_hcd 0000:09:00.0: HC died; cleaning up usb 13-2: USB disconnect, device number 2 WARNING: CPU: 2 PID: 29386 at drivers/media/common/videobuf2/videobuf2-core.c:1803 vb2_start_streaming+0xac/0x120

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7dd56c47784a466b03df62ca766207f483353cdc to before 69c32df23bed6001864779b965fa009bcd9a26deAffected
  • 7dd56c47784a466b03df62ca766207f483353cdc to before a5c01f15809d1d2c319d8bfb11d071df11ab731cAffected
  • 7dd56c47784a466b03df62ca766207f483353cdc to before 4cf3b6fd54ebb1ebc977bdc47fb6cfcf9a471a22Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.