CVE-2026-68228

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to userspace via v4l2m2mbufdone call. In this time, userspace could que...

CVE-2026-68228

The CVE-2026-68228 entry concerns the Linux kernel media subsystem (chips-media wave5 encoder). A race condition allows a buffer to be marked as DONE while it has not yet been removed from the m2m ready queue, because an IRQ path can return the buffer to userspace via v4l2_m2m_buf_done before sta...

EUVD-2026-55329

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to userspace via v4l2m2mbufdone call. In this time, userspace could que...