Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43217

media: iris: gen2: Add sanity check for session stop

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen2: Add sanity check for session stop In iris_kill_session, inst->state is set to IRIS_INST_ERROR and session_close is executed, which will kfree(inst_hfi_gen2->packet). If stop_streaming is called afterward, it will cause a crash. Add a NULL check for inst_hfi_gen2->packet before sendling STOP packet to firmware to fix that.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 11712ce70f8e52fc94365b48ee15aec806b02422 to < 72846441c5f6396de9face04e77fa3d28e9915b6affected
  • 11712ce70f8e52fc94365b48ee15aec806b02422 to < 75992ba43072674fd4767df62a1fe2048565cc60affected
  • 11712ce70f8e52fc94365b48ee15aec806b02422 to < 9aa8d63d09cfc44d879427cc5ba308012ca4ab8eaffected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.18.16 to ≤ 6.18.*unaffected
  • 6.19.6 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References