AZL-110561
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110561.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-110561
- Upstream
- Published
- 2026-10-23T12:18:21Z
- Modified
- 2026-10-26T05:32:42Z
- Summary
- CVE-2026-98882 affecting package kernel 6.6.157.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
media: chips-media: wave5: Add range checks for dec_output_info
If the driver's dec_output_info contains invalid data the driver can write in invalid memory. Add a range check for that.
This fixes this smatch error: drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127
- References