SB20260425128 - Use-after-free in Linux kernel vcodec encoder driver

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-31584)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to use-after-free in fops_vcodec_release() and the mtk_venc_worker workqueue handler when releasing an encoder context while queued or running encode work is still active. A local user can trigger the encoder release path during encode operations to cause a denial of service.

The issue is caused by a race condition between the release path and the workqueue lifecycle after the multimedia job is considered complete.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/93d9a58961a9e09306857e999b3ee76aa4be67f0
• https://git.kernel.org/stable/c/a8a55913552aed45108525d1851c65e1db0cc25b
• https://git.kernel.org/stable/c/f1692337c6fa26e04f89b22a4d84bf5b7ada50d1
• https://git.kernel.org/stable/c/f99353cd0e9f58bf17889049137b8d65fb44ebf1