CVE-2026-68222

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the msi2500 driver where the msi2500 start streaming() function fails to return queued buffers when an error occurs. The vb2 framework provides buffers via buf queue() before calling start streaming(); if the latter returns an error without returning these buffers through vb2 buffer done(), the queued buffers leak. This occurs across five error paths, including scenarios where the USB device is disconnected, mutex lock interruptible() is interrupted, or failures occur within msi2500 set usb adc(), msi2500 isoc init(), and msi2500 ctrl msg(CMD START STREAMING).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.