CVE-2026-43263: media: chips-media: wave5: Fix Null reference while testing fluster
In the Linux kernel, the following vulnerability has been resolved:
media: chips-media: wave5: Fix Null reference while testing fluster
When multi instances are created/destroyed, many interrupts happens and structures for decoder are removed. "struct vpuinstance" this structure is shared for all flow in the decoder, so if the structure is not protected by lock, Null dereference could happens sometimes. IRQ Handler was spilt to two phases and Lock was added as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43263?
CVE-2026-43263 is classified with a moderate severity due to the potential for a null reference error leading to application crashes.
How do I fix CVE-2026-43263?
To fix CVE-2026-43263, users should update their Linux kernel to a version that has addressed this vulnerability as outlined in the latest patches.
Which versions of the Linux kernel are affected by CVE-2026-43263?
CVE-2026-43263 affects Linux kernel versions from 6.8 up to 6.19.6, specifically in the chips-media/wave5 component.
What kind of systems are impacted by CVE-2026-43263?
Systems using the Linux kernel, particularly those relying on the chips-media/wave5 functionality, are impacted by CVE-2026-43263.
How can I verify if my system is vulnerable to CVE-2026-43263?
You can verify your system's vulnerability to CVE-2026-43263 by checking the current kernel version running on your Linux system and comparing it against the affected range.