1063 matches found
CVE-2026-98882
A flaw was found in the Linux kernel's Chips Wave5 video processing driver. Missing bounds validation in the video decoder output handling allows the driver to write data outside allocated memory buffers. A local user could exploit this vulnerability to cause a Denial of Service DoS through a...
SUSE CVE-2026-98882
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for decoutputinfo If the driver's decoutputinfo contains invalid data the driver can write in invalid memory. Add a range check for that. This fixes this smatch error:...
DEBIAN-CVE-2026-98882
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for decoutputinfo If the driver's decoutputinfo contains invalid data the driver can write in invalid memory. Add a range check for that. This fixes this smatch error:...
CVE-2026-98882
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for decoutputinfo If the driver's decoutputinfo contains invalid data the driver can write in invalid memory. Add a range check for that. This fixes this smatch error:...
CVE-2026-98882
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for decoutputinfo If the driver's decoutputinfo contains invalid data the driver can write in invalid memory. Add a range check for that. This fixes this smatch error:...
CVE-2026-98882 media: chips-media: wave5: Add range checks for dec_output_info
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for decoutputinfo If the driver's decoutputinfo contains invalid data the driver can write in invalid memory. Add a range check for that. This fixes this smatch error:...
CVE-2026-98882 media: chips-media: wave5: Add range checks for dec_output_info
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for decoutputinfo If the driver's decoutputinfo contains invalid data the driver can write in invalid memory. Add a range check for that. This fixes this smatch error:...
EUVD-2026-108676
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for decoutputinfo If the driver's decoutputinfo contains invalid data the driver can write in invalid memory. Add a range check for that. This fixes this smatch error:...
CVE-2026-98882
The Linux kernel contains a vulnerability in the chips-media wave5 driver. If the driver's dec_output_info contains invalid data, it can result in a buffer overflow where the driver writes into invalid memory. Specifically, the wave5_vpu_dec_get_output_info() function in drivers/media/platform/ch...
PT-2026-121852
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for dec output info If the driver's dec output info contains invalid data the driver can write in invalid memory. Add a range check for that. This fixes this smatch error:...
Linux Distros Unpatched Vulnerability : CVE-2026-98882
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Add range checks for decoutputinfo If the driver's decoutputinfo contains invalid data the driver can write in invalid memory. Add a...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: For the mtd:rawnand:fslupm module, a bug in the funexecop function has been fixed. A “off-by-one” test was present in this function. The “op-cs” data is copied into “fun-mchipnumber”, which is used to access the “mchipoffsets” an...
internalblue
I chip Broadcom sono utilizzati in circa un miliardo di dispositivi, come tutti gli iPhone , i MacBook , la serie Samsung Galaxy S , i vecchi Google Nexus , i vecchi Thinkpad , i Raspberry Pi , vari dispositivi IoT e altro ancora. Nel 2016, Cypress ha acquisito la divisione IoT di Broadcom. Da...
CVE-2026-89867
A flaw was found in the Linux kernel's media subsystem, specifically within the chips-media wave5 driver. This vulnerability occurs when multiple video decoder instances share a video processing unit VPU and a job slot is not properly released during the draining process, particularly if a decode...
Cisco NX-OS Code Execution
The vulnerability of the Cisco NX-OS operating system of Cisco Nexus 9000 Series switches, based on Silicon One ASIC chips, stems from the binding of open IP addresses during connection to TCP ports 43210 and 43211. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...
SUSE CVE-2026-97514
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handledynamicresolution change requires that the statelock be acquired based on the lockdepassertheld. However, the handledynamicresolutionchange call in...
CVE-2026-97514
A flaw was found in the Linux kernel's Chips Wave5 video processing driver. Improper synchronization during dynamic resolution changes allows functions that may sleep to run while holding an atomic lock, and permits state changes without required locks held. A local user with access to the video...
CVE-2026-97513
A flaw was found in the Linux kernel's Chips Wave5 video driver. A local user could trigger a Denial of Service DoS by causing a race condition during device release. When closing a video stream, the driver releases internal memory structures before removing the instance from the active list,...
SUSE CVE-2026-97513
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx release and wave5release function removing stream instance from list of...
AZL-104036 CVE-2026-97513 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx release and wave5release function removing stream instance from list of...