CVE-2026-97513

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free issue exists in the wave5 media component. A null pointer dereference occurs if an IRQ thread obtains a spinlock between the release of m2m ctx and the removal of the stream instance from the active instances list by the wave5 release() function. This happens because the IRQ thread attempts to access the m2m ctx after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.