CVE-2026-46210
kernel: media: iris: fix use-after-free of fmt_src during MBPF check
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 28, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's iris media driver. A race condition can occur when the driver attempts to free a resource while it is still being accessed by another part of the system. This leads to a use-after-free vulnerability, where a program tries to use memory that has already been released. Exploiting this flaw could cause system instability or a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference