CVE Database›Document archive›CVE-2026-46240

CVE-2026-46240

kernel: media: iris: Fix use-after-free in iris_release_internal_buffers()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel, specifically within the media: iris driver. This vulnerability, a use-after-free, occurs when a buffer is prematurely freed by session_release_buf() while iris_release_internal_buffers() continues to access it. This improper handling of memory can lead to system instability, crashes, or potentially allow an attacker to gain unauthorized access or execute arbitrary code.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference