Medium 5.5Published Jul 25, 2026

CVE-2026-64358media: mtk-jpeg: cancel workqueue on release for supported platforms only

Updated under an hour ago (Oct 27, 2026, 12:30 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: cancel workqueue on release for supported platforms only Since a recent fix the mtk_jpeg_release function cancels any pending or running work present in the driver workqueue using cancel_work_sync function. Currently, only the multicore based variants use this workqueue and they have the jpeg_worker platform data field initialized with a workqueue callback function. For the others, this field value remain NULL by default. The cancel_work_sync function is unconditionally called in mtk_jpeg_release function, even for the variants that do not use the workqueue. This call generates a WARN_ON print in __flush_work because the workqueue callback function presence check fails in __flush_work function (used by cancel_work_sync). So, to avoid these warnings, call cancel_work_sync only if a workqueue callback is defined in platform data.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	2209fdae5c2f615930c9af1379c1cfca199ec5d8 builds before 0fed0fc34ce734b4b8c2f6a467d38bddcb21dda9; from 0498b27a1542021d90269d58347501d4c3ccd84e before ac0774961a6ea174a71d4ffa39966edafbf7662d; from 26506a30e0e26d612f82a7bf0e395626968a44e6 before 973408ceab14555a8548b97c8cc7b54208c3f251; 34c519feef3e4fcff1078dc8bdb25fbbbd10303f builds before 4c4b4af4a9f278da096f0dbdb6b59594701d29bf; from 34c519feef3e4fcff1078dc8bdb25fbbbd10303f before b1845a227fda37b2fe5327df3ca0015d7e290235; e78c39f720679fcf3a2eacd82725ec3ea2648301; from 6.6.140 before 6.6.145; from 6.12.86 before 6.12.96; and 2 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 6.6.140 before 6.6.145; from 6.12.86 before 6.12.96; from 6.18.27 before 6.18.39; from 7.0.4 before 7.1.4	NVD

References

References

https://git.kernel.org/stable/c/0fed0fc34ce734b4b8c2f6a467d38bddcb21dda9	patch
https://git.kernel.org/stable/c/ac0774961a6ea174a71d4ffa39966edafbf7662d	patch
https://git.kernel.org/stable/c/973408ceab14555a8548b97c8cc7b54208c3f251	patch
https://git.kernel.org/stable/c/4c4b4af4a9f278da096f0dbdb6b59594701d29bf	patch
https://git.kernel.org/stable/c/b1845a227fda37b2fe5327df3ca0015d7e290235	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.