CVE-2026-53380
Severity CVSS v4.0:
Pending analysis
Type:
CWE-787
Out-of-bounds Write
Publication date:
19/07/2026
Last modified:
29/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: rzv2h-ivc: Fix concurrent buffer list access<br />
<br />
The list of buffers (`rzv2h_ivc::buffers.queue`) is protected by a<br />
spinlock (`rzv2h_ivc::buffers.lock`). However, in<br />
`rzv2h_ivc_transfer_buffer()`, which runs in a separate workqueue, the<br />
`list_del()` call is executed without holding the spinlock, which makes<br />
it possible for the list to be concurrently modified<br />
<br />
Fix that by removing a buffer from the list in the lock protected section.<br />
<br />
[assign ivc->buffers.curr in critical section as reported by Barnabas]
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (including) | 7.0.9 (excluding) |
To consult the complete list of CPE names with products and versions, see this page