CVE-2026-64358

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the mtk-jpeg driver, the mtk jpeg release() function unconditionally calls the cancel work sync() function to cancel pending or running work in the driver workqueue. However, only multicore-based variants initialize the jpeg worker platform data field with a workqueue callback function; for other variants, this field remains NULL. This unconditional call triggers a WARN ON print in the flush work() function because the callback function presence check fails.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.