Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix use-after-free in iris_release_internal_buffers() The recent change in commit 1dabf00ee206 ("media: iris: gen1: Destroy internal buffers after FW releases") introduced a regression where session_release_buf() may free the buffer. The caller, iris_release_internal_buffers(), continued to access `buffer` after the call, leading to a potential use-after-free. Fix this by setting BUF_ATTR_PENDING_RELEASE before calling session_release_buf(), and reverting the flag if the call fails. This ensures no dereference occurs after potential freeing.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-46240) https://vuldb.com/vuln/366739
Post summary
The post merely states that the severity of CVE-2026‑46240 has increased and links to a vulnerability database, without providing further technical or exploitation details.
CVE-2026-46240 In the Linux kernel, the following vulnerability has been resolved: media https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46240
Post summary
CVE-2026-46240 affects the Linux kernel's media component and has been resolved by a patch; no exploit or PoC details are provided.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.1 | - | - |
| OS | linux | linux_kernel | 7.1 | - | - |