CVE-2026-43290

media: uvcvideo: Return queued buffers on start_streaming() failure

HIGH
7.8
CVSS Score
Published: May 8, 2026 at 01:11 PM UTC
Updated: August 5, 2026 at 01:24 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Return queued buffers on start_streaming() failure Return buffers if streaming fails to start due to uvc_pm_get() error. This bug may be responsible for a warning I got running while :; do yavta -c3 /dev/video0; done on an xHCI controller which failed under this workload. I had no luck reproducing this warning again to confirm. xhci_hcd 0000:09:00.0: HC died; cleaning up usb 13-2: USB disconnect, device number 2 WARNING: CPU: 2 PID: 29386 at drivers/media/common/videobuf2/videobuf2-core.c:1803 vb2_start_streaming+0xac/0x120

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.17 ≤ v < 6.18.166.17 ≤ v < 6.19.66.17 ≤ v < 7.06.19 ≤ v < 6.19.66.177dd56c47784a466b03df62ca766207f483353cdc
Vendor states this is fixed in 4cf3b6fd54ebb1ebc977bdc47fb6cfcf9a471a22 (fixed)
Vendor states this is fixed in 69c32df23bed6001864779b965fa009bcd9a26de (fixed)
Vendor states this is fixed in a5c01f15809d1d2c319d8bfb11d071df11ab731c (fixed)
Vendor states this is fixed in 6.17 (unaffected)
Vendor states this is fixed in 6.18.16 (unaffected)
Vendor states this is fixed in 6.19.6 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card