Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buffers (`rzv2h_ivc::buffers.queue`) is protected by a spinlock (`rzv2h_ivc::buffers.lock`). However, in `rzv2h_ivc_transfer_buffer()`, which runs in a separate workqueue, the `list_del()` call is executed without holding the spinlock, which makes it possible for the list to be concurrently modified Fix that by removing a buffer from the list in the lock protected section. [assign ivc->buffers.curr in critical section as reported by Barnabas]
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.19, < 7.0.9 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/72773ff1cdfaebc593f53b1719b2c1773ecf8c43Patch
- https://git.kernel.org/stable/c/c746522bd3264132ab2e2382e96e19cdb8a6c1baPatch
FAQ
What is CVE-2026-53380?
CVE-2026-53380 is a vulnerability with a CVSS score of 7.8 (HIGH). In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buffers (`rzv2h_ivc::buffers.queue`) is protected by a spinlock (`...
How severe is CVE-2026-53380?
CVE-2026-53380 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-53380?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.