CVE-2026-68231

A flaw was found in the Linux kernel's media: airspy driver. This vulnerability occurs when the airspy_start_streaming() function encounters an error, such as a disconnected USB device, and fails to return previously queued buffers. This oversight leads to a resource leak, which can result in a denial of service (DoS) condition for the system.

This issue affects Airspy SDR devices. start_streaming() failure does not return queued vb2 buffers. Systems without airspy hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the airspy module from loading. See https://access.redhat.com/solutions/41278 for instructions.