Riskcovery

CVE-2026-97513

media: chips-media: wave5: Release m2m_ctx after Instance Removed from List

State
Published
Severity
7.8 High
Published
Sep 24, 2026
Updated
Oct 21, 2026
Reserved
Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: chips-media: wave5: Release m2m_ctx after Instance Removed from List

Possible use after free if IRQ thread manages to obtain spinlock between m2m_ctx release and wave5_release function removing stream instance from list of active instances. The IRQ thread looks for the m2m_ctx which is freed so null pointer dereference occurs.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9707a6254a8a6b978bde811a44fe07d86c229d1c to before 0e6bdd437a3c7a5d8846d7f58fe9645a60ec0933Affected
  • 9707a6254a8a6b978bde811a44fe07d86c229d1c to before 04cda0b5c4ca3f61cbc86e41ead3c462c8cfd659Affected
  • 9707a6254a8a6b978bde811a44fe07d86c229d1c to before 7cdbd7bb21949a8fda10c7104a2b12ee363cbf5cAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.