CVE-2026-46058
kernel: media: amphion: Fix race between m2m job_abort and device_run
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel, specifically within the amphion video processing unit (VPU) driver. A race condition, a situation where multiple operations occur in an unpredictable order, exists in the Video for Linux 2 (V4L2) media-to-memory (m2m) framework. This vulnerability allows a local attacker to exploit a timing issue, leading to a use-after-free error that can cause a kernel panic and result in a denial of service for the system.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-364 · Signal Handler Race Condition