CVE-2026-68213: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on start_
Summary
A bug in the Linux kernel's rtl2832_sdr driver caused buffers (temporary storage for data) to leak when the start_streaming() function failed, because the driver didn't return those buffers to the vb2 framework (video buffer management system). The fix adds a cleanup function that properly returns queued buffers with the correct status when errors occur, and ensures successful starts don't accidentally drain the buffer queue.
Solution / Mitigation
Add rtl2832_sdr_cleanup_queued_bufs() at the error label and before each early return to return queued buffers with VB2_BUF_STATE_QUEUED status on start_streaming failure. Add an explicit success return statement after successful start_streaming to prevent falling through to the error cleanup. The cleanup helper takes a vb2_buffer_state argument so error paths pass VB2_BUF_STATE_QUEUED while stop_streaming uses VB2_BUF_STATE_ERROR.
Vulnerability Details
EPSS: 0.0%
August 10, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-68213
First tracked: August 10, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 95%