CVE-2026-46011

kernel: media: mtk-jpeg: fix use-after-free in release path due to uncancelled work

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's MediaTek JPEG (mtk-jpeg) driver. This use-after-free vulnerability arises from a race condition where the driver frees memory while it may still be in use by a work queue. This can allow a local attacker to cause system instability, leading to a denial of service (DoS), or potentially execute arbitrary code.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference