Memory Corruption Issue in Linux Kernel's Chips-Media Product by Linux Foundation

CVE-2026-98882

What is CVE-2026-98882?

A vulnerability in the Linux kernel's chips-media subsystem allows for a buffer overflow due to insufficient range checks on the dec_output_info data structure. This issue may lead to writing invalid memory, posing a risk to system integrity. The vulnerability has been mitigated by introducing necessary range checks, preventing potential exploitation when the driver's dec_output_info contains erroneous data. Users are encouraged to update to the latest Linux kernel version to ensure protection against this issue.

References