CVE-2026-89880: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: release URBs and stream buffers
Summary
A bug in the Linux kernel's rtl2832_sdr driver causes memory leaks when video streaming fails to start. If certain setup steps fail partway through, allocated memory (URBs, which are USB request blocks for data transfer, and DMA buffers, which are memory regions for direct hardware access) don't get cleaned up, and trying to start streaming again causes corruption and crashes.
Solution / Mitigation
On the error path, call rtl2832_sdr_free_urbs() and rtl2832_sdr_free_stream_bufs() before unlocking. Both helpers are idempotent (free_urbs kills and zeros urbs_initialized; free_stream_bufs is gated on URB_BUF and clears the buf_num counter), so partial-failure paths and the no-allocation paths remain safe.
Vulnerability Details
EPSS: 0.0%
September 16, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-89880
First tracked: September 16, 2026 at 08:08 AM
Classified by LLM (prompt v3) · confidence: 95%