Linux Kernel WAVE5 Driver: Range Check Failure Causing Buffer Overflow
CVE-2026-98882 Published on October 23, 2026
media: chips-media: wave5: Add range checks for dec_output_info
In the Linux kernel, the following vulnerability has been resolved:
media: chips-media: wave5: Add range checks for dec_output_info
If the driver's dec_output_info contains invalid data the driver can
write in invalid memory. Add a range check for that.
This fixes this smatch error:
drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127
Products Associated with CVE-2026-98882
stack.watch emails you whenever new vulnerabilities are published in Linux Kernel or Canonical Ubuntu Linux. Just hit a watch button to start following.
Affected Versions
Linux:- Version 45d1a2b93277a24a90265055f5b87c7562d6acb9 and below d6f777d11c7b34549cdadd8578d4b85f685eb976 is affected.
- Version 45d1a2b93277a24a90265055f5b87c7562d6acb9 and below 144f24ec0fc1e51673611912a6d14ded0a61db43 is affected.
- Version 45d1a2b93277a24a90265055f5b87c7562d6acb9 and below 79aef69bb0903616f4867f0168aea717a11c439c is affected.
- Version 6.8 is affected.
- Before 6.8 is unaffected.
- Version 6.12.111, <= 6.12.* is unaffected.
- Version 6.18.53, <= 6.18.* is unaffected.
- Version 7.2, <= * is unaffected.