What’s Vulnerable › Vulnerabilities

CVE-2026-89868: media: chips-media: wave5: Add timeout while stop_streaming

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stop_streaming When stop_streaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between polls, and bail out once VPU_DEC_STOP_TIMEOUT elapses.

Affected products

• Linux kernel: 6.8 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2ae7faed2e60d6d07d9efdd962d20dcb15330ced
• https://git.kernel.org/stable/c/58e185e69a3dbe3494e54aad330f228f0b6645e1
• https://git.kernel.org/stable/c/c104f37b9f79d6c179c5f1a170d7f1da497ff527
• https://git.kernel.org/stable/c/c343348473e716882249bacf9297d6c363665fd9

Get alerted when CVE-2026-89868 or the next vulnerability affects your stack