CVE-2026-46310

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-46310
In the Linux kernel, the following vulnerability has been resolved: media: renesas: vsp1: Fix NULL pointer deref on module unload When unloading the module on gen 4, we hit a NULL pointer dereference. This is caused by the cleanup code calling vsp1_drm_cleanup() where it should be calling vsp1_vspx_cleanup(). Fix this by checking the IP version and calling the drm or vspx function accordingly, the same way as the init code does.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/58b1e9664d8f74d55d8411cc7a7b275a76a6f24f Patch
https://git.kernel.org/stable/c/bfb2081ba00afbbd15a5ed1ed1acdc3edeea5a98 Patch
https://git.kernel.org/stable/c/c4bb1515b26663e5230603892e67f2cc7df9f0ca Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Jul 2026, 08:10

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: media: renesas: vsp1: Solución a la desreferencia de puntero NULL al descargar el módulo Al descargar el módulo en gen 4, se produce una desreferencia de puntero NULL. Esto es causado por el código de limpieza que llama a vsp1_drm_cleanup() cuando debería estar llamando a vsp1_vspx_cleanup(). Esto se soluciona al verificar la versión de IP y llamar a la función drm o vspx según corresponda, de la misma manera que lo hace el código de inicialización.

08 Jul 2026, 14:51

Type Values Removed Values Added
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/58b1e9664d8f74d55d8411cc7a7b275a76a6f24f - () https://git.kernel.org/stable/c/58b1e9664d8f74d55d8411cc7a7b275a76a6f24f - Patch
References () https://git.kernel.org/stable/c/bfb2081ba00afbbd15a5ed1ed1acdc3edeea5a98 - () https://git.kernel.org/stable/c/bfb2081ba00afbbd15a5ed1ed1acdc3edeea5a98 - Patch
References () https://git.kernel.org/stable/c/c4bb1515b26663e5230603892e67f2cc7df9f0ca - () https://git.kernel.org/stable/c/c4bb1515b26663e5230603892e67f2cc7df9f0ca - Patch

08 Jun 2026, 17:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-06-08 17:16

Updated : 2026-07-23 08:10

NVD link : CVE-2026-46310

Mitre link : CVE-2026-46310

CVE.ORG link : CVE-2026-46310

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference