CVE Explorer

CVE-2026-46058

In the Linux kernel, the following vulnerability has been resolved: media: amphion: Fix race between m2m job_abort and device_run Fix kernel panic caused by race condition where v4l2_m2m_ctx_release() frees m2m_ctx while v4l2_m2m_try_run() is about to call device_run with the same context. Race sequence: v4l2_m2m_try_run(): v4l2_m2m_ctx_release(): lock/unlock v4l2_m2m_cancel_job() job_abort()

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:adb5a463b3dba8ae88617b671e5fb1b3a4383c79d1299bfd69d560c7e65b5b38

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/media/platform/amphion/vpu_v4l2.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.18"},{"lessThan":"5.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.140","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.86","versionType":"s…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/media/platform/amphion/vpu_v4l2.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"516467052fdfc6a13eadc70d43420ae57436bf3c","status":"affected","version":"3cd084519c6f91cbef9d604bcf26844fa81d4922","versionType":"git"},{"lessThan":"42dc622776f3ce1a6c31b13bdc686f7295e3b323","status":"affected","version":"3cd084519c6f91cbef9d604bcf26844fa81d4922","versionType":"git"},{"lessThan":"da4f46c5cf1d26e6b09418ad453e152f2e75a02c","status":"affected","version":"3cd0…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/metrics/0/cvssV3_1

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/42dc622776f3ce1a6c31b13bdc686f7295e3b323"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/516467052fdfc6a13eadc70d43420ae57436bf3c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/6be2cb75bc1300080cfc8051579f22efae9401f7"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/8cd35ceadcfc8c5da2eb7f7ce24525ce9d4ee62e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/da4f46c5cf1d26e6b09418ad453e152f2e75a02c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/fdc150dac1adb9a98be9d6956cff0348838b024a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4ea93caa5b7f633c4e3be518a7eb5824ac4c410764c564be0e449880bf1fad9b · sha256:a0a1eab193e86b80… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer