CVE-2026-97514: media: chips-media: wave5: Fix Reports from Kernel Lock Validator
In the Linux kernel, the following vulnerability has been resolved:
media: chips-media: wave5: Fix Reports from Kernel Lock Validator
handledynamicresolution change requires that the statelock be acquired based on the lockdepassertheld. However, the handledynamicresolutionchange call in initializesequence does not properly obtain the lock before calling.
Since the v4l2ctrlfind and sctrl can sleep, they should not be called while a lock is already held. Store off the fbcbufcount then properly update control once lock has been freed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the media: chips-media: wave5 code, acquire state_lock before calling handle_dynamic_resolution_change from initialize_sequence; do not call v4l2_ctrl_find or s_ctrl while a lock is held because they can sleep, and update the control after releasing the lock. Store fbc_buf_count before releasing the lock as required by the lockdep_assert_held validation.
Event History
Frequently Asked Questions
How can I verify that a kernel includes the fix?
Check whether the kernel source or applied stable patches include one of the referenced commits: 629a937091ecf9c5c9f7a18f41cb0e6c778a7b2f, 072beef6a19f9c84dc5a50c5499663a5734c1096, or 7d5d364f8b2dcc9b6b92456fb55632fde4a4d96f. The provided data does not identify kernel release versions containing these commits.