---
id: CVE-2026-98882
title: 'media: chips-media: wave5: Add range checks for dec_output_info'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  media: chips-media: wave5: Add range checks for dec_output_info

  If the driver's dec_output_info contains invalid data the driver can
  write in invalid memory. Add a ran…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    d6f777d11c7b34549cdadd8578d4b85f685eb976
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    144f24ec0fc1e51673611912a6d14ded0a61db43
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    79aef69bb0903616f4867f0168aea717a11c439c
  - Linux < 6.12.111
  - Linux < 6.18.53
  - Linux (all versions)
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T11:37:34.601Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98882'
references:
  - url: 'https://git.kernel.org/stable/c/d6f777d11c7b34549cdadd8578d4b85f685eb976'
  - url: 'https://git.kernel.org/stable/c/144f24ec0fc1e51673611912a6d14ded0a61db43'
  - url: 'https://git.kernel.org/stable/c/79aef69bb0903616f4867f0168aea717a11c439c'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.584Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

media: chips-media: wave5: Add range checks for dec_output_info

If the driver's dec_output_info contains invalid data the driver can
write in invalid memory. Add a range check for that.

This fixes this smatch error:
drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d6f777d11c7b34549cdadd8578d4b85f685eb976`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 144f24ec0fc1e51673611912a6d14ded0a61db43`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 79aef69bb0903616f4867f0168aea717a11c439c`
- `Linux < 6.12.111`
- `Linux < 6.18.53`
- `Linux (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.