CVE-2025-40302
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/12/2025
Last modified:
08/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: videobuf2: forbid remove_bufs when legacy fileio is active<br />
<br />
vb2_ioctl_remove_bufs() call manipulates queue internal buffer list,<br />
potentially overwriting some pointers used by the legacy fileio access<br />
mode. Forbid that ioctl when fileio is active to protect internal queue<br />
state between subsequent read/write calls.