Use After Free Vulnerability in Linux Kernel Media Component by Vendor

CVE-2026-97513

What is CVE-2026-97513?

A use after free vulnerability has been identified in the Linux kernel's media subsystem, specifically in the wave5 media chip component. This flaw arises when an IRQ thread acquires a spinlock after the m2m_ctx is released but before it is removed from the list of active instances. Consequently, if the IRQ thread attempts to access the m2m_ctx that has already been freed, it leads to a null pointer dereference, potentially compromising system stability and security. Proper handling and timely updates are essential for mitigating this vulnerability.

References