CVE-2026-68209

A flaw was found in the Linux kernel's sun4i-csi media driver. When the start_streaming() function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service (DoS) condition on the affected system.

This issue affects Allwinner sun4i-csi camera. start_streaming() failure does not return queued vb2 buffers. Systems without sun4i-csi are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.