CVE-2026-97507

A flaw was found in the Linux kernel's DM1105 media driver. A local user could cause a Denial of Service DoS through a kernel crash if Direct Memory Access DMA memory allocation fails during device initialization. Because the driver ignores the allocation return value, it proceeds to use a null...

CVE-2026-97577

The Linux kernel contains a vulnerability in the rockchip AV1 decoder driver. Specifically, the function rockchip_vpu981_av1_dec_set_tile_info() fails to properly validate the number of tiles in an AV1 frame against the submitted entry count and the maximum capacity of the AV1_MAX_TILES buffer. T...

PT-2026-98126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm1105 media driver where the return value of the dm1105 dma map function, which manages DMA memory allocation, is ignored within the dm1105 hw init function. If t...

CVE-2026-89886

A flaw was found in the Intel IPU6 media driver within the Linux kernel. This vulnerability occurs when the driver fails to properly clean up resources during an error in processing device connections. An attacker could potentially exploit this by triggering a specific error condition, leading to...

SUSE CVE-2026-89884

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup Add the missing sanity check after looking up the SCP to avoid dereferencing a NULL-pointer in case its driver has not yet been bound...

PT-2026-93533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the em28xx media driver. The audio-only path registers extensions during the primary device probing process. On dual-TS boards, this occurs before dev ne...

PT-2026-93531

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the go7007 media driver. The go7007 snd remove function releases the v4l2 device reference too early when a userspace process still has the capture PCM...

PT-2026-93534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the cx23885 media driver. The netup ci exit function frees the netup ci state while the netup read ci status work item may still be pending or executing ...

PT-2026-93511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the zoran media driver. The zoran init video device function sets zoran vdev release as the release callback. When video unregister device is called, the V4...

Linux Distros Unpatched Vulnerability : CVE-2026-89875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A issue was discovered in the Linux kernel before version 6.3.2. A use-after-free was found in dm1105remove in drivers/media/pci/dm1105/dm1105.c...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: ov2740: Fixed a memory leak in ov2740initcontrols There is a memory leak when testing the media/i2c/ov2740.c file using bpf mock. Unreferenced object: 0xffff8881090e19e0 size 16: Command: “51-i2c-ov2740”, PID 278, jiffies...

Linux Distros Unpatched Vulnerability : CVE-2026-89522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: staging/ipu7: fix async notifier UAF on probe error path isysregisterdevices registers the V4L2 async notifier via isysnotifierinit. If a subsequent prob...

CVE-2026-80650

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

CVE-2026-80650

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

The vulnerability in the driver/media/v4l2-core/v4l2-async.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/v4l2-core/v4l2-async.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001427)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001427 advisory. In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If thi...

SUSE CVE-2026-68222

In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers vi...

SUSE CVE-2026-68224

In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function returns either a valid pointer or an ERRPTR on failure -ENOTUNIQ if multiple links are enabled, -ENOLINK if no connected pad is found. The...

The vulnerability in the driver/media/i2c/ccs/ccs-core.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/media/i2c/ccs/ccs-core.c component of the Linux operating system is related to the lack of zero-division checking. Exploiting this vulnerability can allow an attacker to cause a service failure...