In the Linux kernel, the following vulnerability has been resolved:
media: vivid: check for vb2_is_busy() when toggling caps
The vivid_update_format_cap/out() functions must only be called if the capture/output queue are not busy. But for the controls that select the CROP/COMPOSE/SCALE capability that is not checked.
Only when streaming starts will they be set to 'grabbed' and it is impossible to change the control, but between REQBUFS and STREAMON you are still allowed to set these controls. Since vivid_update_format_cap/out will change the format, this can cause unexpected results.
Besides adding these checks, also add a WARN_ON in vivid_update_format_cap/out() if the queue is busy.
I'm 90% certain that this is the cause of this syzbot bug:
https://syzkaller.appspot.com/bug?extid=dac8f5eaa46837e97b89
But since we never have reproducers, it is hard to be certain. In any case, these checks are needed regardless.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.12Upgrade linux | Aug 11, 2026 | Aug 11, 2026 |
| Redhat_linux | — | — | Aug 13, 2026 | Aug 10, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gke-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-6.8.0-1071-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1064-oracleUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-gcp-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-147-fipsUpgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-6.8.1-1062-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-gke-64k-7.0Upgrade linux-image-azure-5.15Upgrade linux-image-7.0.0-1014-awsUpgrade linux-image-aws-fipsUpgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-7.0.0-38-genericUpgrade linux-image-6.8.0-1067-aws-fipsUpgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-6.8.0-1071-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-6.8.0-1069-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-laptop-23.10Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1067-ibmUpgrade linux-image-awsUpgrade linux-image-generic-7.0Upgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-6.8.0-1071-gcp-fipsUpgrade linux-image-5.15.0-1112-nvidiaUpgrade linux-image-6.8.0-147-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-147-lowlatencyUpgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-realtime-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-64k-7.0Upgrade linux-image-azure-fde-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibm-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidiaUpgrade linux-image-ibm-7.0Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1117-awsUpgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-26.04aUpgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-fips-6.8Upgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-6.8.0-147-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-7.0Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1067-aws-64kUpgrade linux-image-6.8.0-1052-gkeopUpgrade linux-image-6.8.0-1066-gke-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fde-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-7.0Upgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-7.0Upgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-oem-7.0Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-5.15.0-1123-azureUpgrade linux-image-5.15.0-1112-nvidia-lowlatencyUpgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-realtime-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-147-lowlatency-64kUpgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-7.0.0-1017-azureUpgrade linux-image-7.0.0-1015-oemUpgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oracleUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-7.0Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-26.04Upgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-fips-5.15Upgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1067-awsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-6.8.0-1071-gcp-64kUpgrade linux-image-6.8.0-1071-azureUpgrade linux-image-6.8.0-1066-gkeUpgrade linux-image-6.8.0-1064-oracle-64kUpgrade linux-image-5.15.0-198-genericUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-virtual-7.0Upgrade linux-image-5.15.0-198-fipsUpgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-5.15Upgrade linux-image-kvm-5.15 | Oct 6, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Aug 10, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub