CVE-2026-53380 media: rzv2h-ivc: Fix concurrent buffer list access

High 7.8 Published 19 Jul 2026 Updated 5 Aug 2026

A race condition in the Linux kernel's rzv2h-ivc driver allows concurrent buffer list access, potentially leading to memory corruption and privilege escalation.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2026-53380?

CVE-2026-53380 is a high-severity vulnerability in Linux kernel, published on 19 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

media: rzv2h-ivc: Fix concurrent buffer list access

The list of buffers (`rzv2h_ivc::buffers.queue`) is protected by a spinlock (`rzv2h_ivc::buffers.lock`). However, in `rzv2h_ivc_transfer_buffer()`, which runs in a separate workqueue, the `list_del()` call is executed without holding the spinlock, which makes it possible for the list to be concurrently modified

Fix that by removing a buffer from the list in the lock protected section.

[assign ivc->buffers.curr in critical section as reported by Barnabas]

Weakness: CWE-787

Which versions are affected by CVE-2026-53380?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2026-53380?

Apply the vendor's patch.

Is CVE-2026-53380 being exploited?

There is no known exploitation of CVE-2026-53380 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as DEBIAN-CVE-2026-53380, GHSA-fc57-p6q9-rc5h, UBUNTU-CVE-2026-53380.