Executive brief
A vulnerability was identified in the Linux kernel's USB video driver (uvcvideo) where the system fails to properly release memory buffers if a video stream fails to start. This component is responsible for handling USB webcams and video capture devices. An exploit could lead to system instability or a kernel crash, potentially impacting the availability of the affected machine.
Technical details
A vulnerability in the Linux kernel's uvcvideo driver occurs within the uvc_start_streaming_video function in drivers/media/usb/uvc/uvc_queue.c. When the function encounters an error (such as a failure in uvc_pm_get() or uvc_video_start_streaming()), it fails to call uvc_queue_return_buffers() to release queued buffers back to the videobuf2 core. This results in a state mismatch that can trigger kernel warnings or instability. The issue is reachable by local users interacting with USB video devices. Patches have been released to ensure buffers are returned to the UVC_BUF_STATE_QUEUED state upon streaming failure.
Affected products
- Linux Linux kernel All versions prior to the 2026 patches
Timeline
- 2025-10-15: other: Initial patch authored
- 2026-01-22: patched: Patch committed to stable tree
- 2026-05-08: disclosed: CVE published