https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 11:07:55 +0000 https://vulnerability.circl.lu/vuln/cve-2026-46240 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: iris: Fix use-after-free in iris_release_internal_buffers()</p> <p>The recent change in commit 1dabf00ee206 (&#34;media: iris: gen1: Destroy internal buffers after FW releases&#34;) introduced a regression where session_release_buf() may free the buffer. The caller, iris_release_internal_buffers(), continued to access `buffer` after the call, leading to a potential use-after-free.</p> <p>Fix this by setting BUF_ATTR_PENDING_RELEASE before calling session_release_buf(), and reverting the flag if the call fails. This ensures no dereference occurs after potential freeing.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>media: iris: Fix use-after-free in iris_release_internal_buffers()</p> <p>The recent change in commit 1dabf00ee206 (&#34;media: iris: gen1: Destroy internal buffers after FW releases&#34;) introduced a regression where session_release_buf() may free the buffer. The caller, iris_release_internal_buffers(), continued to access `buffer` after the call, leading to a potential use-after-free.</p> <p>Fix this by setting BUF_ATTR_PENDING_RELEASE before calling session_release_buf(), and reverting the flag if the call fails. This ensures no dereference occurs after potential freeing.</p> https://vulnerability.circl.lu/vuln/cve-2026-46240