CVE-2026-68214

A flaw was found in the Linux kernel's media: rtl2832 driver. A timing issue during the removal of the rtl2832 device can lead to a use-after-free vulnerability. This occurs when the system attempts to access memory that has already been released, which can cause system instability or a denial of service (DoS). A local attacker could potentially exploit this flaw.

This issue affects RTL2832 DVB tuners. rtl2832_remove() UAF when i2c_gate_work rescheduled after cancel. Systems without rtl2832 hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the rtl2832 module from loading. See https://access.redhat.com/solutions/41278 for instructions.