In the Linux kernel, the following vulnerability has been resolved:
media: stm32-dcmipp: Return queued buffers on start_streaming() failure
The vb2 framework hands buffers to the driver via buf_queue() before calling start_streaming(). If start_streaming() returns an error without first returning those buffers via vb2_buffer_done(), vb2_start_streaming() fires WARN_ON(owned_by_drv_count) and the queued buffers leak.
dcmipp_bytecap_start_streaming() returned -EINVAL when the source subdevice could not be resolved from the media graph, before pm_runtime_resume_and_get() and media_pipeline_start() had been called. The remaining error paths already converge on the err_buffer_done label, which calls dcmipp_bytecap_all_buffers_done(..., VB2_BUF_STATE_QUEUED). Jump to that label directly: the intermediate err_pm_put / err_media_pipeline_stop labels are skipped, which is correct because nothing they would undo has happened yet.
This mirrors the uvcvideo fix in commit 4cf3b6fd54eb ("media: uvcvideo: Return queued buffers on start_streaming() failure").
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Nov 3, 2026 | Aug 10, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1017-azureUpgrade linux-image-azureUpgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1014-awsUpgrade linux-image-oem-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-gke-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-awsUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1015-oemUpgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-realtimeUpgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-virtual-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-gkeUpgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-azure-fde-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oracleUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-oracle-7.0Upgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-7.0.0-38-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-gcp-7.0 | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Nov 4, 2026 | Aug 10, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub