CVE-2026-89872 media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix fwnode leak in v4l2fwnodeparselink In v4l2fwnodeparselink, the remote endpoint fwnode reference is acquired using fwnodegraphgetremoteendpoint. This reference is properly released in the error paths, but i...

CVE-2026-89872

CVE-2026-89872 affects the Linux kernel in the v4l2-fwnode media subsystem. The root cause is a fwnode reference leak in v4l2_fwnode_parse_link(): the remote endpoint fwnode handle acquired via fwnode_graph_get_remote_endpoint() is properly released on error paths but is not released on the succe...

EUVD-2026-80472

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix fwnode leak in v4l2fwnodeparselink In v4l2fwnodeparselink, the remote endpoint fwnode reference is acquired using fwnodegraphgetremoteendpoint. This reference is properly released in the error paths, but i...

CVE-2026-89872 media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix fwnode leak in v4l2fwnodeparselink In v4l2fwnodeparselink, the remote endpoint fwnode reference is acquired using fwnodegraphgetremoteendpoint. This reference is properly released in the error paths, but i...

PT-2026-93508

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wave5 media driver where decoder instances sharing a VPU also share a single v4l2 m2m job slot. During the draining process, the device run function defers the v4l...

Linux Distros Unpatched Vulnerability : CVE-2026-89874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-async: avoid deleting unlinked ASC entry on link error v4l2asyncmatchnotify creates ancillary media links before adding asc-ascsubdeventry to...

PT-2026-93527

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the intel/ipu6 media component. The isys notifier init function initializes a notifier using v4l2 async nf init and subsequently adds remote sub-devices via v4l2...

CVE-2026-89874: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: avoid deleting unlinked ASC entry on link error v4l2asyncmatchnotify creates ancillary media links before adding asc-ascsubdeventry to sd-asclist. If ancillary link creation fails, the function jumps to...

CVE-2026-89872: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix fwnode leak in v4l2fwnodeparselink In v4l2fwnodeparselink, the remote endpoint fwnode reference is acquired using fwnodegraphgetremoteendpoint. This reference is properly released in the error paths, but i...

PT-2026-93514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the v4l2-ctrls component where HEVC SPS Sequence Parameter Set controls do not properly validate short-term and long-term RPS Reference Picture Set counts. This allows...

PT-2026-93523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An index underflow exists in the st ref pic set prediction function within the RKVDEC HEVC decoder. The issue occurs when calculating the reference RPS index using the formula st rps idx...

Linux Distros Unpatched Vulnerability : CVE-2026-89873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long- term RPS counts that decoder drivers use to walk the...

CVE-2026-89882: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: hevc: guard INTERREFPICSETPRED index underflow strefpicsetprediction computes the reference RPS index as strpsidx - deltaidxminus1 + 1 per HEVC spec equation 7-59. Both operands are u8, so when deltaidxminus1 + 1...

CVE-2026-89873: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC...

PT-2026-93537

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1.2 Description A memory leak exists in the cedrus init ctrls function. The V4L2 control handler is initialized before memory is allocated for ctx-ctrls. If the memory allocation for ctx-ctrls fails, the functi...

CVE-2026-89890: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card release go7007sndinit already takes a v4l2device reference for the ALSA side, but go7007sndremove drops it immediately after calling sndcardfreewhenclosed. That is too early when ...

CVE-2026-89879: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: s2255: bound JPEG frame size before copying into the buffer s2255fillbuff memcpys vc-jpgsize bytes of a captured JPEG/MJPEG frame into the vb2 plane. vc-jpgsize is taken verbatim from the S2255MARKERFRAME header the device...

PT-2026-93531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the go7007 media driver. The go7007 snd remove function releases the v4l2 device reference too early when a userspace process still has the capture PCM...

PT-2026-93513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the v4l2 fwnode parse link function. The remote endpoint fwnode reference is acquired via fwnode graph get remote endpoint, and while it is released during err...

PT-2026-93673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usbtv media component where an open PCM file can remain active after a USB disconnect. This occurs because usbtv audio free utilizes snd card free when closed,...