In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for dec_output_info If the driver's… (CVE-2026-98882)

The Linux kernel's chips-media wave5 driver had a vulnerability where the dec_output_info structure could contain invalid data, allowing the driver to write outside valid memory bounds. Specifically, a buffer overflow was detected in the wave5_vpu_dec_get_output_info() function related to the frame_buf buffer size check. The fix involved adding range checks to ensure that the dec_output_info data is valid before use, preventing invalid memory writes.

If exploited, this vulnerability could cause the driver to write to invalid memory locations, potentially leading to system instability or crashes. However, no known exploits are reported in the wild. The impact is limited to systems using the affected chips-media wave5 driver in the Linux kernel.

A fix has been implemented in the Linux kernel source by adding proper range checks in the driver code. Users should update their Linux kernel to a version that includes this fix once it is released. Patch status is not explicitly confirmed in the provided data; therefore, users should consult the official Linux kernel advisories or source repositories for the fixed version.