CVE-2026-46310: media: renesas: vsp1: Fix NULL pointer deref on module unload
In the Linux kernel, the following vulnerability has been resolved:
media: renesas: vsp1: Fix NULL pointer deref on module unload
When unloading the module on gen 4, we hit a NULL pointer dereference. This is caused by the cleanup code calling vsp1drmcleanup() where it should be calling vsp1vspxcleanup().
Fix this by checking the IP version and calling the drm or vspx function accordingly, the same way as the init code does.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46310?
The severity of CVE-2026-46310 is rated as 14, indicating a significant risk due to the NULL pointer dereference issue.
How do I fix CVE-2026-46310?
To fix CVE-2026-46310, ensure you are using the latest version of the Linux kernel where the NULL pointer dereference has been addressed.
What components are affected by CVE-2026-46310?
CVE-2026-46310 affects the media components in the Linux kernel, specifically related to the Renesas VSP1 driver.
What type of vulnerability is CVE-2026-46310?
CVE-2026-46310 is a Null Pointer Dereference vulnerability that can occur during the module unload process.
When was CVE-2026-46310 published?
CVE-2026-46310 was published on June 8, 2026.