Riskcovery

CVE-2026-46310

media: renesas: vsp1: Fix NULL pointer deref on module unload

State
Published
Severity
Not scored
Published
Jun 8, 2026
Updated
Jun 14, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: renesas: vsp1: Fix NULL pointer deref on module unload

When unloading the module on gen 4, we hit a NULL pointer dereference. This is caused by the cleanup code calling vsp1_drm_cleanup() where it should be calling vsp1_vspx_cleanup().

Fix this by checking the IP version and calling the drm or vspx function accordingly, the same way as the init code does.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d06c1a9f348d22478c6bc5684f9c990e15ada1e9 to before bfb2081ba00afbbd15a5ed1ed1acdc3edeea5a98Affected
  • d06c1a9f348d22478c6bc5684f9c990e15ada1e9 to before c4bb1515b26663e5230603892e67f2cc7df9f0caAffected
  • d06c1a9f348d22478c6bc5684f9c990e15ada1e9 to before 58b1e9664d8f74d55d8411cc7a7b275a76a6f24fAffected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.32 through 6.18.*Not affected
  • 7.0.9 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.