CVE-2026-64447
kernel: staging: media: ipu7: fix double-free and use-after-free in error paths
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's ipu7 media driver. This vulnerability involves incorrect memory management where memory can be freed multiple times and subsequently accessed after it has been freed, specifically during error handling paths in device initialization. A local attacker could potentially exploit this memory corruption to cause a system crash (denial of service) or, in more severe cases, execute arbitrary code with elevated privileges.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1341 · Multiple Releases of Same Resource or Handle