ByteOS Network

NVD Vulnerability Details :

CVE-2026-46240

Received

Source-416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published At-28 May, 2026 | 10:16

Updated At-28 May, 2026 | 10:16

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix use-after-free in iris_release_internal_buffers() The recent change in commit 1dabf00ee206 ("media: iris: gen1: Destroy internal buffers after FW releases") introduced a regression where session_release_buf() may free the buffer. The caller, iris_release_internal_buffers(), continued to access `buffer` after the call, leading to a potential use-after-free. Fix this by setting BUF_ATTR_PENDING_RELEASE before calling session_release_buf(), and reverting the flag if the call fails. This ensures no dereference occurs after potential freeing.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

References

Hyperlink	Source	Resource
https://git.kernel.org/stable/c/18c64439f249859b6140f7bf8bcf95c8ed841f28	416baaa9-dc9f-4396-8d5f-8c081fb06d67	N/A
https://git.kernel.org/stable/c/dd24998a4a4016fb9921916024399bd80f0d45c6	416baaa9-dc9f-4396-8d5f-8c081fb06d67	N/A
https://git.kernel.org/stable/c/f27cfdcfc916bb59297825805f4c3499f89f9e76	416baaa9-dc9f-4396-8d5f-8c081fb06d67	N/A

Hyperlink: https://git.kernel.org/stable/c/18c64439f249859b6140f7bf8bcf95c8ed841f28

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/dd24998a4a4016fb9921916024399bd80f0d45c6

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/f27cfdcfc916bb59297825805f4c3499f89f9e76

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History