CVE-2026-46240
kernel: media: iris: Fix use-after-free in iris_release_internal_buffers()
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 28, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel, specifically within the media: iris driver. This vulnerability, a use-after-free, occurs when a buffer is prematurely freed by session_release_buf() while iris_release_internal_buffers() continues to access it. This improper handling of memory can lead to system instability, crashes, or potentially allow an attacker to gain unauthorized access or execute arbitrary code.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference