Description
In the Linux kernel, the following vulnerability has been resolved:

media: chips-media: wave5: Fix Reports from Kernel Lock Validator

handle_dynamic_resolution change requires that the state_lock be acquired
based on the lockdep_assert_held. However, the
handle_dynamic_resolution_change call in initialize_sequence does not
properly obtain the lock before calling.

Since the v4l2_ctrl_find and s_ctrl can sleep, they should not be called
while a lock is already held. Store off the fbc_buf_count then properly
update control once lock has been freed.
Published: 2026-09-24
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via deadlock in media driver
Action: Immediate Patch
AI Analysis

Impact

An improper lock handling bug in the media:chips-media:wave5 component of the Linux kernel allows scheduled tasks that may sleep to be called while a critical lock is still held. This can lead to a deadlock or undefined driver state, potentially causing the system or media subsystem to become unresponsive. The vulnerability does not directly enable code execution but introduces a severe operational disruption. The weakness aligns with CWE-413.

Affected Systems

All Linux kernel releases containing the media:chips-media:wave5 code prior to the fix commit are affected; the bug exists in the kernel's media subsystem and will impact any system utilizing this component until the patch is applied.

Risk and Exploitability

The vulnerability receives a CVSS score of 5.5, positioning it as a moderate‑severity flaw that could halt media operations. The EPSS score is reported as <1% and the issue is not listed in the CISA KEV catalog, indicating limited exploitation evidence. The likely attack vector is local: an attacker with user‑level access capable of interacting with the media device could trigger the problematic code path. Proper acquisition of the lock or interruption of sleepable functions would mitigate the issue, but until the patch is applied, the risk remains moderately high.

Generated by OpenCVE AI on October 1, 2026 at 11:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the Linux kernel patch that includes commits 072beef6a19f9c84dc5a50c5499663a5734c1096, 629a937091ecf9c5c9f7a18f41cb0e6c778a7b2f, and 7d5d364f8b2dcc9b6b92456fb55632fde4a4d96f
  • Reboot the system after applying the patch to ensure the driver reloads with correct lock handling
  • Monitor the media subsystem for hangs or errors after reboot to verify the issue is resolved

Generated by OpenCVE AI on October 1, 2026 at 11:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4817-1 linux-6.12 security update
Debian DSA Debian DSA DSA-6528-1 linux security update
History

Thu, 01 Oct 2026 10:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-788

Tue, 29 Sep 2026 13:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-413
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 25 Sep 2026 04:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-788

Thu, 24 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handle_dynamic_resolution change requires that the state_lock be acquired based on the lockdep_assert_held. However, the handle_dynamic_resolution_change call in initialize_sequence does not properly obtain the lock before calling. Since the v4l2_ctrl_find and s_ctrl can sleep, they should not be called while a lock is already held. Store off the fbc_buf_count then properly update control once lock has been freed.
Title media: chips-media: wave5: Fix Reports from Kernel Lock Validator
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-28T05:30:50.947Z

Reserved: 2026-09-24T16:01:01.152Z

Link: CVE-2026-97514

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-24T17:17:29.323

Modified: 2026-09-28T06:16:37.423

Link: CVE-2026-97514

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-24T00:00:00Z

Links: CVE-2026-97514 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T12:00:06Z

Weaknesses
  • CWE-413

    Improper Resource Locking