CVE-2026-89868

Summary

In the Linux kernel, the following vulnerability has been resolved:

media: chips-media: wave5: Add timeout while stop_streaming

When stop_streaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between polls, and bail out once VPU_DEC_STOP_TIMEOUT elapses.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9707a6254a8a6b978bde811a44fe07d86c229d1c < 58e185e69a3dbe3494e54aad330f228f0b6645e1affected
LinuxLinux9707a6254a8a6b978bde811a44fe07d86c229d1c < c343348473e716882249bacf9297d6c363665fd9affected
LinuxLinux9707a6254a8a6b978bde811a44fe07d86c229d1c < c104f37b9f79d6c179c5f1a170d7f1da497ff527affected
LinuxLinux9707a6254a8a6b978bde811a44fe07d86c229d1c < 2ae7faed2e60d6d07d9efdd962d20dcb15330cedaffected
LinuxLinux6.8affected
LinuxLinux0 < 6.8unaffected
LinuxLinux6.12.112 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2.5 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References