CVE-2026-68222

A flaw was found in the Linux kernel's msi2500 media driver. This vulnerability occurs when the start_streaming() function fails to properly return queued buffers, causing them to leak. An attacker with local access could potentially exploit this to cause system instability or a denial of service (DoS) by triggering the driver's error paths. This issue is related to improper error handling within the driver.

This issue affects MSI2500 SDR devices. start_streaming() failure does not return queued vb2 buffers. Systems without msi2500 hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the msi2500 module from loading. See https://access.redhat.com/solutions/41278 for instructions.