CVE-2026-43142 media: iris: gen1: Destroy internal buffers after FW releases

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not destroying them. This left stale allocations that were no longer used, especially across resolution...

CVE-2026-43142

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not destroying them. This left stale allocations that were no longer used, especially across resolution...

CVE-2026-43142 media: iris: gen1: Destroy internal buffers after FW releases

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not destroying them. This left stale allocations that were no longer used, especially across resolution...

PT-2026-37482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the iris driver for gen1, internal buffers were not destroyed after being released by the firmware. This led to stale allocations that remained unused, particularly during resolution...

PT-2026-37575

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the iris media driver, missing platform data entries for SM8750 cause operational failures. Specifically, the absence of the get vpu buffer size field, which should be set to iris vpu...

PT-2026-37491

In the Linux kernel, the following vulnerability has been resolved: Revert "media: iris: Add sanity check for stop streaming" This reverts commit ad699fa78b59241c9d71a8cafb51525f3dab04d4. Revert the check that skipped stop streaming when the instance was in IRIS INST ERROR, as it caused multiple...

CVE-2026-43151: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Revert "media: iris: Add sanity check for stop streaming" This reverts commit ad699fa78b59241c9d71a8cafb51525f3dab04d4. Revert the check that skipped stopstreaming when the instance was in IRISINSTERROR, as it caused multiple...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the iris driver skipping the stopstreaming operation under incorrect conditions, resulting in...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the iris driver’s behavior when creating internal buffers: it first adds buffers to a list before...

CVE-2026-43146: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: iris: Add buffer to list only after successful allocation Move listaddtail to after dmaallocattrs succeeds when creating internal buffers. Previously, the buffer was enqueued in buffers-list before the DMA allocation. If t...

CVE-2026-43142: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not destroying them. This left stale allocations that were no longer used, especially across resolution...

CVE-2026-43235: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: iris: Add missing platform data entries for SM8750 Two platform-data fields for SM8750 were missed: - getvpubuffersize = irisvpu33bufsize Without this, the driver fails to allocate the required internal buffers, leading to...

CVE-2026-43217: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen2: Add sanity check for session stop In iriskillsession, inst-state is set to IRISINSTERROR and sessionclose is executed, which will kfreeinsthfigen2-packet. If stopstreaming is called afterward, it will cause a...

PT-2026-37486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iris media component where internal buffers were added to the buffers-list using the list add tail function before the dma alloc attrs allocation process was...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the iris gen1 driver failing to destroy the internal buffer after it is released by the firmware,...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the iris driver’s failure to check for null pointers when session termination occurs, potentially...

PT-2026-44363

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the iris release internal buffers function. A regression was introduced where session release buf could free a buffer while the caller, iris release...

The vulnerability in the function irisdestroy_internal_buffers() of the drivers/media/platform/qcom/iris/iris_buffer.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the irisdestroyinternalbuffers function in the drivers/media/platform/qcom/iris/irisbuffer.c file, a driver for multimedia devices in the Linux kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the `iris_hfi_gen2_handle_system_error()` function in the `drivers/media/platform/qcom/iris/iris_hfi_gen2_response.c` driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the irishfigen2handlesystemerror function in the drivers/media/platform/qcom/iris/irishfigen2response.c driver for multimedia devices in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: media: iris: Add sanity check for stop streaming Add sanity check in irisvb2stopstreaming. If inst-state is already IRISINSTERROR, we should skip the streamoff operation because it would still send packets to the firmware. In...