Buffer Overflow Vulnerability in Linux Kernel Affecting USBTV Streaming

CVE-2025-39714

What is CVE-2025-39714?

A vulnerability in the Linux kernel related to the USBTV driver allows for a buffer overflow when streaming video. When a program like ffplay is used for streaming and another program, such as qv4l2, changes the TV standard from NTSC to PAL, it causes the kernel to crash due to an attempt to access unmapped memory. This happens because the resolution within the usbtv structure increases with the change in TV standard, but the video plane buffer isn't adjusted accordingly, leading to an overflow. This flaw indicates potential system instability which can disrupt streaming services.

References