SB2026091782 - Memory leak in Linux kernel media dvb-frontends driver
Published: September 17, 2026
Security Bulletin ID
SB2026091782
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Partial DoS
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Memory leak (CVE-ID: CVE-2026-89881)
CWE-ID: CWE-401 - Missing release of memory after effective lifetime
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service by leaking DMA resources.
The vulnerability exists due to improper resource cleanup in the rtl2832_sdr driver removal handling when a USB device is disconnected while streaming remains active. A local user can close a file descriptor after the disconnection to cause a denial of service by leaking DMA resources.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/034b6a4f9589c04bc3f2bd5125658cd72d3e17c8
- https://git.kernel.org/stable/c/053581d4657c6b5289c5de71a4828d313c005189
- https://git.kernel.org/stable/c/0ef9f19010ae4ba93aca211ea8f0081b9bf7aab2
- https://git.kernel.org/stable/c/234c46b95a032232e31fa5987b84fb8f87a9693b
- https://git.kernel.org/stable/c/7443b16b6dd8889a3b9c5236a09e7c58f0d11dae
- https://git.kernel.org/stable/c/a0d9d9a3b41a1346c26af57aade6ba3f552fa171
- https://git.kernel.org/stable/c/bbf15e83c37d9ac938b7c35c02b748fe54230010
- https://git.kernel.org/stable/c/dabb047c62668f280998e29117c55e41aabac336