Use-After-Free Vulnerability in Linux Kernel's Media Module by Linux Foundation

CVE-2026-46240

What is CVE-2026-46240?

A vulnerability has been identified within the Linux kernel's media subsystem, specifically related to the management of internal buffers. This issue arises from a regression introduced by a recent commit that incorrectly handles the release of internal session buffers. After a buffer is freed, the system may still attempt to access it, creating potential security risks associated with dereferencing freed memory. The issue is addressed by implementing proper attribute handling, ensuring that no attempts are made to access freed buffers, thus mitigating the risk of exploitation.

References