CVE-2026-89867
kernel: media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 16, 2026
Updated · October 6, 2026
Description
A flaw was found in the Linux kernel's media subsystem, specifically within the chips-media wave5 driver. This vulnerability occurs when multiple video decoder instances share a video processing unit (VPU) and a job slot is not properly released during the draining process, particularly if a decode picture (DEC_PIC) is not queued. This resource leak can cause the shared job slot to become unavailable, leading to instances stalling and potentially resulting in a system hang, effectively causing a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime