CVE-2026-97514media: chips-media: wave5: Fix Reports from Kernel Lock Validator
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handle_dynamic_resolution change requires that the state_lock be acquired based on the lockdep_assert_held. However, the handle_dynamic_resolution_change call in initialize_sequence does not properly obtain the lock before calling. Since the v4l2_ctrl_find and s_ctrl can sleep, they should not be called while a lock is already held. Store off the fbc_buf_count then properly update control once lock has been freed.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 28, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 9707a6254a8a6b978bde811a44fe07d86c229d1c builds before 629a937091ecf9c5c9f7a18f41cb0e6c778a7b2f; 9707a6254a8a6b978bde811a44fe07d86c229d1c builds before 072beef6a19f9c84dc5a50c5499663a5734c1096; 9707a6254a8a6b978bde811a44fe07d86c229d1c builds before 7d5d364f8b2dcc9b6b92456fb55632fde4a4d96f | CNA record |
References
- https://git.kernel.org/stable/c/629a937091ecf9c5c9f7a18f41cb0e6c778a7b2f
- https://git.kernel.org/stable/c/072beef6a19f9c84dc5a50c5499663a5734c1096
- https://git.kernel.org/stable/c/7d5d364f8b2dcc9b6b92456fb55632fde4a4d96f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.