CVE-2026-89868 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

media: chips-media: wave5: Add timeout while stop_streaming

When stop_streaming is called, an infinite loop may occur in some cases.
Add a bounded poll of the queue status: loop until the queues drain,
sleeping briefly between polls, and bail out once VPU_DEC_STOP_TIMEOUT
elapses.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/2ae7faed2e60d6d07d9efdd962d20dcb15330ced
https://git.kernel.org/stable/c/c104f37b9f79d6c179c5f1a170d7f1da497ff527

History

Wed, 16 Sep 2026 10:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stop_streaming When stop_streaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between polls, and bail out once VPU_DEC_STOP_TIMEOUT elapses.
Title		media: chips-media: wave5: Add timeout while stop_streaming
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2ae7faed2e60d6d07d9efdd962d20dcb15330ced https://git.kernel.org/stable/c/c104f37b9f79d6c179c5f1a170d7f1da497ff527

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-16T10:31:37.872Z

Updated: 2026-09-16T10:31:37.872Z

Reserved: 2026-09-11T19:38:34.771Z

Link: CVE-2026-89868

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-16T11:16:54.950

Modified: 2026-09-16T11:16:54.950

Link: CVE-2026-89868

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89868", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.771Z", "datePublished": "2026-09-16T10:31:37.872Z", "dateUpdated": "2026-09-16T10:31:37.872Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-16T10:31:37.872Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: chips-media: wave5: Add timeout while stop_streaming\n\nWhen stop_streaming is called, an infinite loop may occur in some cases.\nAdd a bounded poll of the queue status: loop until the queues drain,\nsleeping briefly between polls, and bail out once VPU_DEC_STOP_TIMEOUT\nelapses."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/platform/chips-media/wave5/wave5-vpu-dec.c", "drivers/media/platform/chips-media/wave5/wave5-vpuconfig.h"], "versions": [{"version": "9707a6254a8a6b978bde811a44fe07d86c229d1c", "lessThan": "c104f37b9f79d6c179c5f1a170d7f1da497ff527", "status": "affected", "versionType": "git"}, {"version": "9707a6254a8a6b978bde811a44fe07d86c229d1c", "lessThan": "2ae7faed2e60d6d07d9efdd962d20dcb15330ced", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/platform/chips-media/wave5/wave5-vpu-dec.c", "drivers/media/platform/chips-media/wave5/wave5-vpuconfig.h"], "versions": [{"version": "6.8", "status": "affected"}, {"version": "0", "lessThan": "6.8", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.5", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "7.2.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "7.3-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/c104f37b9f79d6c179c5f1a170d7f1da497ff527"}, {"url": "https://git.kernel.org/stable/c/2ae7faed2e60d6d07d9efdd962d20dcb15330ced"}], "title": "media: chips-media: wave5: Add timeout while stop_streaming", "x_generator": {"engine": "bippy-1.2.0"}}}}