CVE-2026-97514

Source
https://cve.org/CVERecord?id=CVE-2026-97514
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97514.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97514
Downstream
Published
2026-09-24T16:05:12Z
Modified
2026-09-29T03:47:23Z
Summary
media: chips-media: wave5: Fix Reports from Kernel Lock Validator
Details

In the Linux kernel, the following vulnerability has been resolved:

media: chips-media: wave5: Fix Reports from Kernel Lock Validator

handle_dynamic_resolution change requires that the state_lock be acquired based on the lockdep_assert_held. However, the handle_dynamic_resolution_change call in initialize_sequence does not properly obtain the lock before calling.

Since the v4l2_ctrl_find and s_ctrl can sleep, they should not be called while a lock is already held. Store off the fbc_buf_count then properly update control once lock has been freed.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97514.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9707a6254a8a6b978bde811a44fe07d86c229d1c
Fixed
629a937091ecf9c5c9f7a18f41cb0e6c778a7b2f
Fixed
072beef6a19f9c84dc5a50c5499663a5734c1096
Fixed
7d5d364f8b2dcc9b6b92456fb55632fde4a4d96f

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97514.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97514.json"