Skip to main content
← All vulnerabilities
CVE-2026-89868

media: chips-media: wave5: Add timeout while stop_streaming

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.12.112, 6.18.53, 7.2.5
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stop_streaming When stop_streaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between polls, and bail out once VPU_DEC_STOP_TIMEOUT elapses.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 9707a6254a8a6b978bde811a44fe07d86c229d1c · fixed in 58e185e69a3dbe3494e54aad330f228f0b6645e1; From 9707a6254a8a6b978bde811a44fe07d86c229d1c · fixed in c343348473e716882249bacf9297d6c363665fd9; From 9707a6254a8a6b978bde811a44fe07d86c229d1c · fixed in c104f37b9f79d6c179c5f1a170d7f1da497ff527; From 9707a6254a8a6b978bde811a44fe07d86c229d1c · fixed in 2ae7faed2e60d6d07d9efdd962d20dcb15330ced

  • Linux Linux

    6.8

  • KernelLinux

    From 6.8.0 · fixed in 6.12.112; From 6.13.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.5

References 4

git.kernel.org