Bug 2535400 (CVE-2026-89869) - CVE-2026-89869 kernel: media: qcom: iris: use disable_irq() during power-off
Summary: CVE-2026-89869 kernel: media: qcom: iris: use disable_irq() during power-off
Keywords:
Status: NEW
Alias: CVE-2026-89869
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-16 12:39 UTC by OSIDB Bzimport
Modified: 2026-11-04 18:57 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-16 12:39:47 UTC
In the Linux kernel, the following vulnerability has been resolved:

media: qcom: iris: use disable_irq() during power-off

The IRQ is registered as a threaded IRQ.

Using disable_irq_nosync() in iris_vpu_power_off() does not wait
for an already queued threaded IRQ handler to complete before
returning.

As a result, a threaded IRQ handler may still run after the VPU has
been powered down and access hardware registers after power-off.

Replace disable_irq_nosync() with disable_irq() so the power-off path
waits for any in-flight threaded IRQ handler to complete before
returning.


Note You need to log in before you can comment on or make changes to this bug.