---
id: CVE-2026-98882
title: 'media: chips-media: wave5: Add range checks for dec_output_info'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  media: chips-media: wave5: Add range checks for dec_output_info

  If the driver's dec_output_info contains invalid data the driver can
  write in invalid memory. Add a ran…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 45d1a2b93277a24a90265055f5b87c7562d6acb9 <
    d6f777d11c7b34549cdadd8578d4b85f685eb976
  - >-
    Linux >= 45d1a2b93277a24a90265055f5b87c7562d6acb9 <
    144f24ec0fc1e51673611912a6d14ded0a61db43
  - >-
    Linux >= 45d1a2b93277a24a90265055f5b87c7562d6acb9 <
    79aef69bb0903616f4867f0168aea717a11c439c
  - Linux 6.8
published: '2026-10-23'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T06:56:05.724Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98882'
references:
  - url: 'https://git.kernel.org/stable/c/d6f777d11c7b34549cdadd8578d4b85f685eb976'
  - url: 'https://git.kernel.org/stable/c/144f24ec0fc1e51673611912a6d14ded0a61db43'
  - url: 'https://git.kernel.org/stable/c/79aef69bb0903616f4867f0168aea717a11c439c'
tags:
  - cve.org
epss: 0.0022
epssPercentile: 0.12465
ingestedAt: '2026-10-23T13:24:55.584Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

media: chips-media: wave5: Add range checks for dec_output_info

If the driver's dec_output_info contains invalid data the driver can
write in invalid memory. Add a range check for that.

This fixes this smatch error:
drivers/media/platform/chips-media/wave5/wave5-vpuapi.c:588 wave5_vpu_dec_get_output_info() error: buffer overflow 'inst->frame_buf' 64 <= 127

## Affected

- `Linux >= 45d1a2b93277a24a90265055f5b87c7562d6acb9 < d6f777d11c7b34549cdadd8578d4b85f685eb976`
- `Linux >= 45d1a2b93277a24a90265055f5b87c7562d6acb9 < 144f24ec0fc1e51673611912a6d14ded0a61db43`
- `Linux >= 45d1a2b93277a24a90265055f5b87c7562d6acb9 < 79aef69bb0903616f4867f0168aea717a11c439c`
- `Linux 6.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.