CVE intelligence
CVE-2026-98882
Vulnerability intelligence
Published Oct 23, 2026Sources checked Oct 23, 2026
N/ACVSS not listedScore unavailable
What this means
Review the available evidence
CVE-2026-98882. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
What to do nextRemediation and response
CISA KEVNot listedBased on the latest collected catalog
EPSSUnavailableNo current score collected
Ransomware useNot markedCISA KEV ransomware field
Threat actors0Source-linked actor relationships
Overview
What is CVE-2026-98882?
In the Linux kernel, the following vulnerability has been resolved:
media: chips-media: wave5: Add range checks for dec_output_info
If the driver's dec_output_info contains invalid data the driver can write in invalid memory. Add a range check for that.
This fixes this smatch error: drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127
Source: NVD