Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45928

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix memory leak on codec_info allocation failure In wave5_vpu_open_enc() and wave5_vpu_open_dec(), a vpu instance is allocated via kzalloc(). If the subsequent allocation for inst->codec_info fails, the functions return -ENOMEM without freeing the previously allocated instance, causing a memory leak. Fix this by calling kfree() on the instance in this error path to ensure it is properly released.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:20b56b8e1ef7df93f5355f10a6f941509f2e02fe543433c00e4fad328f4bcce2
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/media/platform/chips-media/wave5/wave5-vpu-dec.c","drivers/media/platform/chips-media/wave5/wave5-vpu-enc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.8"},{"lessThan":"6.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.14","versionType":"semver"},{"lessThanOr…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:24591fff81ba44b4d5759b10264a29ddb8d1e40608942d01b25a51e6a130c235 · sha256:e0ac58d55dc4ac22… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/media/platform/chips-media/wave5/wave5-vpu-dec.c","drivers/media/platform/chips-media/wave5/wave5-vpu-enc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"52defdd4034db1a34bb48006f889d66a3629224b","status":"affected","version":"9707a6254a8a6b978bde811a44fe07d86c229d1c","versionType":"git"},{"lessThan":"1de71556cbd6e1d0d26fb86b9b3bb8caa0df8495","status":"affected","version":"9707a6254a8a6b978bde811a44fe07d86c229d1c","versionType":"git"},{"lessThan":"32e…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:24591fff81ba44b4d5759b10264a29ddb8d1e40608942d01b25a51e6a130c235 · sha256:e0ac58d55dc4ac22… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/media/platform/chips-media/wave5/wave5-vpu-dec.c","drivers/media/platform/chips-media/wave5/wave5-vpu-enc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.8"},{"lessThan":"6.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.14","versionType":"semver"},{"lessThanOr…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:24591fff81ba44b4d5759b10264a29ddb8d1e40608942d01b25a51e6a130c235 · sha256:e0ac58d55dc4ac22… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/media/platform/chips-media/wave5/wave5-vpu-dec.c","drivers/media/platform/chips-media/wave5/wave5-vpu-enc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"52defdd4034db1a34bb48006f889d66a3629224b","status":"affected","version":"9707a6254a8a6b978bde811a44fe07d86c229d1c","versionType":"git"},{"lessThan":"1de71556cbd6e1d0d26fb86b9b3bb8caa0df8495","status":"affected","version":"9707a6254a8a6b978bde811a44fe07d86c229d1c","versionType":"git"},{"lessThan":"32e…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:24591fff81ba44b4d5759b10264a29ddb8d1e40608942d01b25a51e6a130c235 · sha256:e0ac58d55dc4ac22… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/1de71556cbd6e1d0d26fb86b9b3bb8caa0df8495"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:24591fff81ba44b4d5759b10264a29ddb8d1e40608942d01b25a51e6a130c235 · sha256:e0ac58d55dc4ac22… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/32e9e45cf7e3422d21fa64535588d3572faf71c3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:24591fff81ba44b4d5759b10264a29ddb8d1e40608942d01b25a51e6a130c235 · sha256:e0ac58d55dc4ac22… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/52defdd4034db1a34bb48006f889d66a3629224b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:24591fff81ba44b4d5759b10264a29ddb8d1e40608942d01b25a51e6a130c235 · sha256:e0ac58d55dc4ac22… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/a519e21e32398459ba357e67b541402f7295ee1b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:24591fff81ba44b4d5759b10264a29ddb8d1e40608942d01b25a51e6a130c235 · sha256:e0ac58d55dc4ac22… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer