CVE-2026-68217

A flaw was found in the Linux kernel's pwc media driver. When initiating a streaming operation, if an error occurs during the submission of isochronous USB Request Blocks (URBs), a buffer may not be correctly deallocated. This oversight can lead to a resource leak, potentially causing system instability or a denial of service (DoS) condition.

This issue affects Philips WebCam (pwc) USB devices. If isochronous URB submission fails during start_streaming(), fill_buf state is not drained, leaving buffers in an inconsistent state. Systems without pwc hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the pwc module from loading. See https://access.redhat.com/solutions/41278 for instructions.