Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-97513

media: chips-media: wave5: Release m2m_ctx after Instance Removed from List

Description

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2m_ctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2m_ctx release and wave5_release function removing stream instance from list of active instances. The IRQ thread looks for the m2m_ctx which is freed so null pointer dereference occurs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9707a6254a8a6b978bde811a44fe07d86c229d1c to < 0e6bdd437a3c7a5d8846d7f58fe9645a60ec0933affected
  • 9707a6254a8a6b978bde811a44fe07d86c229d1c to < 04cda0b5c4ca3f61cbc86e41ead3c462c8cfd659affected
  • 9707a6254a8a6b978bde811a44fe07d86c229d1c to < 7cdbd7bb21949a8fda10c7104a2b12ee363cbf5caffected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References