In the Linux kernel, the following vulnerability has been resolved:
media: camss: Clean up received buffers on failed start of streaming
It is required to return the received buffers, if streaming can not be started. For instance media_pipeline_start() may fail with EPIPE, if a link validation between entities is not passed, and in such a case a user gets a kernel warning:
WARNING: CPU: 1 PID: 520 at drivers/media/common/videobuf2/videobuf2-core.c:1592 vb2_start_streaming+0xec/0x160 <snip> Call trace: vb2_start_streaming+0xec/0x160 vb2_core_streamon+0x9c/0x1a0 vb2_ioctl_streamon+0x68/0xbc v4l_streamon+0x30/0x3c __video_do_ioctl+0x184/0x3e0 video_usercopy+0x37c/0x7b0 video_ioctl2+0x24/0x40 v4l2_ioctl+0x4c/0x70
The fix is to correct the error path in video_start_streaming() of camss.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 29, 2025 | Dec 29, 2025 |
| Ubuntu | — | Upgrade linux-xilinx-zynqmpUpgrade linux-lowlatencyUpgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-aws-hweUpgrade linux-kvmUpgrade linux-iotUpgrade linux-oracle-5.15Upgrade linux-gcp-fipsUpgrade linux-realtimeUpgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-gkeopUpgrade linux-gcp-5.15Upgrade linux-oracleUpgrade linux-azureUpgrade linux-azure-5.15Upgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-gcp-4.15Upgrade linux-azure-5.4Upgrade linux-azure-4.15Upgrade linux-hweUpgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linuxUpgrade linux-raspiUpgrade linux-ibm-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-aws-5.15Upgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-raspi-5.4Upgrade linux-gkeUpgrade linux-aws-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-aws | Jan 6, 2026 | Dec 24, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub