CVE-2026-89881
kernel: media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 16, 2026
Updated · October 6, 2026
Description
A flaw was found in the rtl2832_sdr driver within the Linux kernel. When a USB device using this driver is disconnected, the driver prematurely clears a critical device pointer. This prevents the proper release of Direct Memory Access (DMA) stream buffers and USB Request Blocks (URBs) when the user application closes its file descriptor. This silent resource leak could lead to a Denial of Service (DoS) due to resource exhaustion.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime