CVE-2022-2652: v4l2loopback Project v4l2loopback

Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).

Affected products

• v4l2loopback Project v4l2loopback: before 0.12.6 (fixed in 0.12.6)

Published 2022-08-04. Last modified 2026-06-17.