CVE-2026-89868 media: chips-media: wave5: Add timeout while stop_streaming

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

EUVD-2026-80466

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware via sendfirmwarecommand, which accesses VPU registers. Both the STREAMOFF path wave5vpudecjobabort and the V4L2DECCMDSTOP...

CVE-2026-89866 media: chips-media: wave5: Resume device before setting EOS flag

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware via sendfirmwarecommand, which accesses VPU registers. Both the STREAMOFF path wave5vpudecjobabort and the V4L2DECCMDSTOP...

CVE-2026-89866 media: chips-media: wave5: Resume device before setting EOS flag

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware via sendfirmwarecommand, which accesses VPU registers. Both the STREAMOFF path wave5vpudecjobabort and the V4L2DECCMDSTOP...

CVE-2026-89866

This vulnerability affects the chips-media wave5 VPU driver in the Linux kernel . When the End-of-Stream (EOS) flag is set via send_firmware_command(), it accesses VPU registers that may be powered down if the device is in a runtime-suspended state. Both the STREAMOFF path (wave5_vpu_dec_job_abor...

Linux Distros Unpatched Vulnerability : CVE-2026-89866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware via sendfirmwarecommand, which accesses VPU register...

Linux Distros Unpatched Vulnerability : CVE-2026-89867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Defer jobfinish only when a DECPIC was queued Decoder instances sharing a VPU also share one v4l2m2m job slot, released when the...

CVE-2026-89868: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

CVE-2026-89867: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Defer jobfinish only when a DECPIC was queued Decoder instances sharing a VPU also share one v4l2m2m job slot, released when the running context calls v4l2m2mjobfinish. While draining, devicerun defers...

CVE-2026-89866: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware via sendfirmwarecommand, which accesses VPU registers. Both the STREAMOFF path wave5vpudecjobabort and the V4L2DECCMDSTOP...

Linux Distros Unpatched Vulnerability : CVE-2026-89868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the que...

The vulnerability of the wave5_vpu_remove() function in the drivers/media/platform/chips-media/wave5/wave5-vpu.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wave5vpuremove function in the drivers/media/platform/chips-media/wave5/wave5-vpu.c driver for multimedia devices in the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the drivers/media/platform/chips-media/wave5/wave5-vpu.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/platform/chips-media/wave5/wave5-vpu.c component in Linux kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the wave5 module in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the wave5 module in the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the wave5 components of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the wave5 component of the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

SUSE CVE-2026-68228

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to userspace via v4l2m2mbufdone call. In this time, userspace could que...

Linux Distros Unpatched Vulnerability : CVE-2026-68228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to...

CVE-2026-68228

A flaw was found in the Linux kernel's media subsystem, specifically within the wave5 encoder. A local user could exploit a race condition during encoder processing, where a buffer is returned to userspace before being fully removed from the ready queue. This could lead to a corrupted buffer list...

CVE-2026-68228

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to userspace via v4l2m2mbufdone call. In this time, userspace could que...

UBUNTU-CVE-2026-68228

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to userspace via v4l2m2mbufdone call. In this time, userspace could que...