What is CVE-2026-98882?

CVE-2026-98882 is a unscored severity Linux kernel vulnerability. CVE-2026-98882 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-98882?

CVE-2026-98882 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-98882?

Yes, CVE-2026-98882 has been patched. Fixed versions include 6.12.111, 6.18.53 and 7.2.

Is CVE-2026-98882 actively exploited?

CVE-2026-98882 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-98882

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for dec_output_info If the driver's dec_output_info contains invalid data the driver can write in invalid memory. Add a range check for that. This fixes this smatch error: drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127

Package Linux Kernel

Published 2026-10-23

Last modified 2026-10-23

Patch available

Yes

Affected versions

Fixed in 6.12.111, 6.18.53, 7.2 and their respective stable series.

Fixed in

✓ 6.12.111 6.12.x ✓ 6.18.53 6.18.x ✓ 7.2

References

3 total

Frequently asked questions

What is CVE-2026-98882?

CVE-2026-98882 is a unscored severity Linux kernel vulnerability . CVE-2026-98882 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-98882?

Yes. CVE-2026-98882 has been patched. Fixed versions include 6.12.111, 6.18.53 and 7.2.
Is CVE-2026-98882 actively exploited?

No. CVE-2026-98882 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.