CVE-2026-64358

media: mtk-jpeg: cancel workqueue on release for supported platforms only

State
Published
Severity
Not scored
Published
Jul 25, 2026
Updated
Aug 17, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: mtk-jpeg: cancel workqueue on release for supported platforms only

Since a recent fix the mtk_jpeg_release function cancels any pending or running work present in the driver workqueue using cancel_work_sync function. Currently, only the multicore based variants use this workqueue and they have the jpeg_worker platform data field initialized with a workqueue callback function. For the others, this field value remain NULL by default. The cancel_work_sync function is unconditionally called in mtk_jpeg_release function, even for the variants that do not use the workqueue. This call generates a WARN_ON print in __flush_work because the workqueue callback function presence check fails in __flush_work function (used by cancel_work_sync).

So, to avoid these warnings, call cancel_work_sync only if a workqueue callback is defined in platform data.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2209fdae5c2f615930c9af1379c1cfca199ec5d8 to before 0fed0fc34ce734b4b8c2f6a467d38bddcb21dda9Affected
  • 0498b27a1542021d90269d58347501d4c3ccd84e to before ac0774961a6ea174a71d4ffa39966edafbf7662dAffected
  • 26506a30e0e26d612f82a7bf0e395626968a44e6 to before 973408ceab14555a8548b97c8cc7b54208c3f251Affected
  • 34c519feef3e4fcff1078dc8bdb25fbbbd10303f to before 4c4b4af4a9f278da096f0dbdb6b59594701d29bfAffected
  • 34c519feef3e4fcff1078dc8bdb25fbbbd10303f to before b1845a227fda37b2fe5327df3ca0015d7e290235Affected
  • e78c39f720679fcf3a2eacd82725ec3ea2648301Affected
  • 6.6.140 to before 6.6.145Affected
  • 6.12.86 to before 6.12.96Affected
  • 6.18.27 to before 6.18.39Affected
  • 7.0.4 to before 7.1Affected
LinuxLinux
  • 7.1Affected
  • before 7.1Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.96 through 6.12.*Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.