CVE-2026-31584

kernel: media: mediatek: vcodec: fix use-after-free in encoder release path

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the MediaTek vcodec driver within the Linux kernel. This use-after-free vulnerability occurs when the driver frees a context structure before ensuring that all pending or running workqueue operations have completed. A local attacker could exploit this race condition, potentially leading to a system crash (Denial of Service) or other unpredictable system behavior due to memory corruption.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference