IT

Tracker / CVE-2026-43223

CVE-2026-43223

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix URB leak in pvr2_send_request_ex When pvr2_send_request_ex() submits a write URB successfully but fails to submit the read URB (e.g. returns -ENOMEM), it returns immediately without waiting for the write URB to complete. Since the driver reuses the same URB structure, a subsequent call to pvr2_send_request_ex() attempts to submit the still-active write URB, triggering a 'URB submitted while active' warning in usb_submit_urb(). Fix this by ensuring the write URB is unlinked and waited upon if the read URB submission fails.

Affected products and versions

linux linux_kernel · 2.6.18 → 5.10.252
linux linux_kernel · 5.11 → 5.15.202
linux linux_kernel · 5.16 → 6.1.165
linux linux_kernel · 6.13 → 6.18.16
linux linux_kernel · 6.19 → 6.19.6
linux linux_kernel · 6.2 → 6.6.128
linux linux_kernel · 6.7 → 6.12.75

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References