CVE-2026-68216
Detail
Received This CVE record has recently been published to the CVE List and has been included within the NVD dataset.
Description
In the Linux kernel, the following vulnerability has been resolved:
media: pwc: Return queued buffers on start_streaming() failure
The vb2 framework hands buffers to the driver via buf_queue() before
calling start_streaming(). If start_streaming() returns an error
without first returning those buffers via vb2_buffer_done(),
vb2_start_streaming() fires WARN_ON(owned_by_drv_count) and the queued
buffers leak.
pwc's start_streaming() had two early returns that hit this trap:
-ENODEV when the USB device was already disconnected, and -ERESTARTSYS
when mutex_lock_interruptible() was interrupted by a signal. Call the
existing pwc_cleanup_queued_bufs() helper with VB2_BUF_STATE_QUEUED
before returning (matching the state already used by the
pwc_isoc_init() error path in the same function).
This mirrors the uvcvideo fix in commit 4cf3b6fd54eb ("media: uvcvideo:
Return queued buffers on start_streaming() failure").
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 Severity and Vector Strings:
NVD assessment
not yet provided.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected]
Change History
4 change records found show changes
CVE Modified by kernel.org
8/19/2026 1:20:37 PM
Action
Type
Old Value
New Value
Added
Reference
https://git.kernel.org/stable/c/0362ae30b61b3053ee3095c1b8f179197ec4f539
Added
Reference
https://git.kernel.org/stable/c/d552852bf76b7dfb35b4593fc874d8dd2f1b1bf3
Added
Reference
https://git.kernel.org/stable/c/fa78e590852751d3ad32f33f6b4e210fe6ccbe9b
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/media/usb/pwc/pwc-if.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"f2f9fcacd81953dde6cb86312ab13ca13e689664","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"5d7cc2634c3843a1414a0f6407aa17f1f91dee60","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"cb16b79a2be2cec9c3ebe4147490817c4d8b1de3","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"a4f8f629983f643333e49df90557805469bcbb25","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"975b2ee20e569d47821e4f6c9761b4664d48a6a4","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/media/usb/pwc/pwc-if.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"3.5","status":"affected"},{"version":"0","lessThan":"3.5","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Record truncated, showing 2048 of 2471 characters.
View Entire Change Record [{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/media/usb/pwc/pwc-if.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"d552852bf76b7dfb35b4593fc874d8dd2f1b1bf3","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"0362ae30b61b3053ee3095c1b8f179197ec4f539","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"fa78e590852751d3ad32f33f6b4e210fe6ccbe9b","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"f2f9fcacd81953dde6cb86312ab13ca13e689664","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"5d7cc2634c3843a1414a0f6407aa17f1f91dee60","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"cb16b79a2be2cec9c3ebe4147490817c4d8b1de3","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"a4f8f629983f643333e49df90557805469bcbb25","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"975b2ee20e569d47821e4f6c9761b4664d48a6a4","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/media/usb/pwc/pwc-if.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"3.5","status":"affected"},{"version":"0","lessThan":"3.5","versionType":"semver","status":"unaffected"},{"version":"5.10.265","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.216","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.183","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versio
CVE Modified by kernel.org
8/17/2026 1:18:23 AM
Action
Type
Old Value
New Value
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/media/usb/pwc/pwc-if.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"f2f9fcacd81953dde6cb86312ab13ca13e689664","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"5d7cc2634c3843a1414a0f6407aa17f1f91dee60","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"cb16b79a2be2cec9c3ebe4147490817c4d8b1de3","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"a4f8f629983f643333e49df90557805469bcbb25","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"975b2ee20e569d47821e4f6c9761b4664d48a6a4","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/media/usb/pwc/pwc-if.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"3.5","status":"affected"},{"version":"0","lessThan":"3.5","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/media/usb/pwc/pwc-if.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"f2f9fcacd81953dde6cb86312ab13ca13e689664","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"5d7cc2634c3843a1414a0f6407aa17f1f91dee60","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"cb16b79a2be2cec9c3ebe4147490817c4d8b1de3","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"a4f8f629983f643333e49df90557805469bcbb25","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"975b2ee20e569d47821e4f6c9761b4664d48a6a4","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/media/usb/pwc/pwc-if.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"3.5","status":"affected"},{"version":"0","lessThan":"3.5","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
CVE Modified by kernel.org
8/13/2026 7:17:24 PM
Action
Type
Old Value
New Value
Added
CVSS V3.1
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
New CVE Received from kernel.org
8/10/2026 9:20:09 AM
Action
Type
Old Value
New Value
Added
Description
In the Linux kernel, the following vulnerability has been resolved:
media: pwc: Return queued buffers on start_streaming() failure
The vb2 framework hands buffers to the driver via buf_queue() before
calling start_streaming(). If start_streaming() returns an error
without first returning those buffers via vb2_buffer_done(),
vb2_start_streaming() fires WARN_ON(owned_by_drv_count) and the queued
buffers leak.
pwc's start_streaming() had two early returns that hit this trap:
-ENODEV when the USB device was already disconnected, and -ERESTARTSYS
when mutex_lock_interruptible() was interrupted by a signal. Call the
existing pwc_cleanup_queued_bufs() helper with VB2_BUF_STATE_QUEUED
before returning (matching the state already used by the
pwc_isoc_init() error path in the same function).
This mirrors the uvcvideo fix in commit 4cf3b6fd54eb ("media: uvcvideo:
Return queued buffers on start_streaming() failure").
Added
Reference
https://git.kernel.org/stable/c/5d7cc2634c3843a1414a0f6407aa17f1f91dee60
Added
Reference
https://git.kernel.org/stable/c/975b2ee20e569d47821e4f6c9761b4664d48a6a4
Added
Reference
https://git.kernel.org/stable/c/a4f8f629983f643333e49df90557805469bcbb25
Added
Reference
https://git.kernel.org/stable/c/cb16b79a2be2cec9c3ebe4147490817c4d8b1de3
Added
Reference
https://git.kernel.org/stable/c/f2f9fcacd81953dde6cb86312ab13ca13e689664
Added
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/media/usb/pwc/pwc-if.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"f2f9fcacd81953dde6cb86312ab13ca13e689664","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"5d7cc2634c3843a1414a0f6407aa17f1f91dee60","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"cb16b79a2be2cec9c3ebe4147490817c4d8b1de3","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"a4f8f629983f643333e49df90557805469bcbb25","versionType":"git","status":"affected"},{"version":"ceede9fa8939e40ad0ddb4ad1355f45c6f1d3478","lessThan":"975b2ee20e569d47821e4f6c9761b4664d48a6a4","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/media/usb/pwc/pwc-if.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"3.5","status":"affected"},{"version":"0","lessThan":"3.5","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.42","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.6","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Quick Info
CVE Dictionary Entry: CVE-2026-68216 NVD
Published Date: 08/10/2026 NVD
Last Modified: 08/19/2026
Source: kernel.org
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
