CVE-2026-68204

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vivid media driver where the vivid update format cap() and vivid update format out() functions are called without verifying if the capture or output queues are busy. Specifically, controls selecting CROP, COMPOSE, or SCALE capabilities lack this check. While controls are locked once streaming starts, they remain adjustable between the REQBUFS and STREAMON states. Because these functions modify the format, calling them while the queue is busy can lead to unexpected results.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.