https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:19:53 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74437 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work</p> <p>If a UVC camera has an asynchronous control, uvc_status_stop may be called from async_ctrl.work:</p> <p>uvc_ctrl_status_event_work() uvc_ctrl_status_event() uvc_ctrl_clear_handle() uvc_pm_put() uvc_status_put() uvc_status_stop() cancel_work_sync()</p> <p>This will cause a deadlock, since cancel_work_sync will wait for uvc_ctrl_status_event_work to complete before returning.</p> <p>Fix this by returning early from uvc_status_stop if we are currently in the work function. flush_status now remains false until uvc_status_start is called again, ensuring that uvc_ctrl_status_event_work won&#39;t resubmit the URB.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work</p> <p>If a UVC camera has an asynchronous control, uvc_status_stop may be called from async_ctrl.work:</p> <p>uvc_ctrl_status_event_work() uvc_ctrl_status_event() uvc_ctrl_clear_handle() uvc_pm_put() uvc_status_put() uvc_status_stop() cancel_work_sync()</p> <p>This will cause a deadlock, since cancel_work_sync will wait for uvc_ctrl_status_event_work to complete before returning.</p> <p>Fix this by returning early from uvc_status_stop if we are currently in the work function. flush_status now remains false until uvc_status_start is called again, ensuring that uvc_ctrl_status_event_work won&#39;t resubmit the URB.</p> https://vulnerability.circl.lu/vuln/cve-2026-74437