---
id: CVE-2026-43263
title: 'media: chips-media: wave5: Fix Null reference while testing fluster'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  media: chips-media: wave5: Fix Null reference while testing fluster

  When multi instances are created/destroyed, many interrupts happens
  and structures for decoder are …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9707a6254a8a6b978bde811a44fe07d86c229d1c <
    925b8f99f92fc968990ebb4ec49c96ac2d4e600b
  - >-
    Linux >= 9707a6254a8a6b978bde811a44fe07d86c229d1c <
    ea316b784fe6a61b29131c98cddb24e651b1dcbc
  - >-
    Linux >= 9707a6254a8a6b978bde811a44fe07d86c229d1c <
    d12bcf183ec7da4305d848068d15f18044eaf62a
  - >-
    Linux >= 9707a6254a8a6b978bde811a44fe07d86c229d1c <
    e66ff2b08e4ee1c4d3b84f24818e5bcc178cc3a4
  - Linux 6.8
published: '2026-05-06'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:40:27.588Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43263'
references:
  - url: 'https://git.kernel.org/stable/c/925b8f99f92fc968990ebb4ec49c96ac2d4e600b'
  - url: 'https://git.kernel.org/stable/c/ea316b784fe6a61b29131c98cddb24e651b1dcbc'
  - url: 'https://git.kernel.org/stable/c/d12bcf183ec7da4305d848068d15f18044eaf62a'
  - url: 'https://git.kernel.org/stable/c/e66ff2b08e4ee1c4d3b84f24818e5bcc178cc3a4'
tags:
  - cve.org
epss: 0.00173
epssPercentile: 0.06396
ingestedAt: '2026-10-21T12:48:53.642Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

media: chips-media: wave5: Fix Null reference while testing fluster

When multi instances are created/destroyed, many interrupts happens
and structures for decoder are removed.
"struct vpu_instance" this structure is shared for all flow in the decoder,
so if the structure is not protected by lock, Null dereference
could happens sometimes.
IRQ Handler was spilt to two phases and Lock was added as well.

## Affected

- `Linux >= 9707a6254a8a6b978bde811a44fe07d86c229d1c < 925b8f99f92fc968990ebb4ec49c96ac2d4e600b`
- `Linux >= 9707a6254a8a6b978bde811a44fe07d86c229d1c < ea316b784fe6a61b29131c98cddb24e651b1dcbc`
- `Linux >= 9707a6254a8a6b978bde811a44fe07d86c229d1c < d12bcf183ec7da4305d848068d15f18044eaf62a`
- `Linux >= 9707a6254a8a6b978bde811a44fe07d86c229d1c < e66ff2b08e4ee1c4d3b84f24818e5bcc178cc3a4`
- `Linux 6.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.