Lucene search
K

5 matches found

NVD
NVD
added 2026/05/28 10:16 a.m.13 views

CVE-2026-46210

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmtsrc during MBPF check During concurrency testing, multiple instances can run in parallel, and each instance uses its own inst-lock while the core-lock protects the list of active instances. T...

7.8CVSS0.00129EPSS
Exploits0References2
OSV
OSV
added 2026/05/28 10:16 a.m.3 views

UBUNTU-CVE-2026-46210

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmtsrc during MBPF check During concurrency testing, multiple instances can run in parallel, and each instance uses its own inst-lock while the core-lock protects the list of active instances. T...

7.8CVSS5.7AI score0.00129EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/28 9:40 a.m.10 views

CVE-2026-46210

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmtsrc during MBPF check During concurrency testing, multiple instances can run in parallel, and each instance uses its own inst-lock while the core-lock protects the list of active instances. T...

5.7AI score0.00129EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/05/28 9:40 a.m.31 views

CVE-2026-46210 media: iris: fix use-after-free of fmt_src during MBPF check

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmtsrc during MBPF check During concurrency testing, multiple instances can run in parallel, and each instance uses its own inst-lock while the core-lock protects the list of active instances. T...

7.8CVSS0.00129EPSS
Exploits0References2
CVE
CVE
added 2026/05/28 9:40 a.m.18 views

CVE-2026-46210

The CVE-2026-46210 issue affects the Linux kernel Iris media driver. A race between per-instance locks (inst->lock) and the core list lock (core->lock) allows a use-after-free during MBPF checks: MBPF iterates the core list and reads fields like fmt_src->width/height while iris_close() m...

7.8CVSS5.7AI score0.00129EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder