CVE Database›Document archive›CVE-2026-64447

CVE-2026-64447

kernel: staging: media: ipu7: fix double-free and use-after-free in error paths

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's ipu7 media driver. This vulnerability involves incorrect memory management where memory can be freed multiple times and subsequently accessed after it has been freed, specifically during error handling paths in device initialization. A local attacker could potentially exploit this memory corruption to cause a system crash (denial of service) or, in more severe cases, execute arbitrary code with elevated privileges.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1341 · Multiple Releases of Same Resource or Handle