[syzbot] Monthly media report (Aug 2026)

Hello media maintainers/developers,

This is a 31-day syzbot report for the media subsystem.
All related reports/information can be found at:
https://syzkaller.appspot.com/upstream/s/media

During the period, 8 new issues were detected and 0 were fixed.
In total, 30 issues are still open and 115 have already been fixed.
There are also 11 low-priority issues.

Some of the still happening issues:

Ref Crashes Repro Title
<1> 469     Yes   KASAN: slab-use-after-free Read in em28xx_release_resources
                  https://syzkaller.appspot.com/bug?extid=16062f26c6480975e5ed
<2> 250     Yes   KASAN: slab-use-after-free Read in dvb_frontend_release (3)
                  https://syzkaller.appspot.com/bug?extid=ae466a728017ec940b41
<3> 20      Yes   memory leak in v4l2_ctrl_handler_init_class (3)
                  https://syzkaller.appspot.com/bug?extid=b1de0d5fd8a15fac11aa
<4> 12      Yes   BUG: corrupted list in az6007_i2c_xfer
                  https://syzkaller.appspot.com/bug?extid=0192952caa411a3be209
<5> 4       Yes   memory leak in vidtv_psi_short_event_desc_init
                  https://syzkaller.appspot.com/bug?extid=afc686a471d70896c5d9
<6> 14804   Yes   KASAN: slab-use-after-free Read in dvb_device_open
                  https://syzkaller.appspot.com/bug?extid=1eb177ecc3943b883f0a
<7> 7       No    KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (5)
                  https://syzkaller.appspot.com/bug?extid=cb43e758a4dc84dd467f
<8> 5       Yes   KASAN: slab-use-after-free Read in load_firmware_cb (2)
                  https://syzkaller.appspot.com/bug?extid=db4326df1b9af04f68fc
<9> 1       No    WARNING in az6007_i2c_xfer (3)
                  https://syzkaller.appspot.com/bug?extid=5d7ca36eaac36bd6a34e

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at [email protected].

To disable reminders for individual bugs, reply with the following command:
#syz set <Ref> no-reminders

To change bug's subsystems, reply with:
#syz set <Ref> subsystems: new-subsystem

You may send multiple commands in a single email message.