PT-2026-61085 · Linux · Linux Kernel

CVE-2026-53380 · Published 2026-07-19 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the rzv2h-ivc media component where the buffer list rzv2h ivc::buffers.queue is accessed concurrently. While the list is intended to be protected by the rzv2h ivc::buffers.lock spinlock, the list del() function within rzv2h ivc transfer buffer() is executed without holding this lock. This allows the list to be modified by multiple processes simultaneously, potentially leading to memory corruption or system instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53380

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-53380 · Security Note
• https://twitter.com/vuldb/status/2079038906365059428 · Twitter Post
• https://git.kernel.org/stable/c/c746522bd3264132ab2e2382e96e19cdb8a6c1ba · Note
• https://twitter.com/DFIR_Lab/status/2079392326984581156 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2078810069991358856 · Twitter Post
• https://git.kernel.org/stable/c/72773ff1cdfaebc593f53b1719b2c1773ecf8c43 · Note