CVE-2026-43223

media: pvrusb2: fix URB leak in pvr2_send_request_ex

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: pvrusb2: fix URB leak in pvr2_send_request_ex

When pvr2_send_request_ex() submits a write URB successfully but fails to

submit the read URB (e.g. returns -ENOMEM), it returns immediately without

waiting for the write URB to complete. Since the driver reuses the same

URB structure, a subsequent call to pvr2_send_request_ex() attempts to

submit the still-active write URB, triggering a 'URB submitted while

active' warning in usb_submit_urb().

Fix this by ensuring the write URB is unlinked and waited upon if the read

URB submission fails.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2026-05-06T11:28Z
EPSS history
Timeline
  • 06 MAY 11:28Z
    media: pvrusb2: fix URB leak in pvr2_send_request_ex
    cvelistv5