PT-2026-43878 · Linux · Linux Kernel
CVE-2026-46011
·
Published
2026-05-27
·
Updated
2026-07-28
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 7.0.11-1.1
Description
A use-after-free issue exists in the
mtk jpeg release() function. The function frees the context structure ctx without cancelling pending or running work in ctx->jpeg work. This creates a race condition where the mtk jpegenc worker() callback may access the context memory after it has been freed. The work is typically queued via queue work() during JPEG encode or decode operations through mtk jpeg device run(). If the device is closed while work is pending, the handler accesses freed memory.Recommendations
Update to version 7.0.11-1.1.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel