Bug 2467159 (CVE-2026-43217) - CVE-2026-43217 kernel: media: iris: gen2: Add sanity check for session stop
Summary: CVE-2026-43217 kernel: media: iris: gen2: Add sanity check for session stop
Keywords:
Status: NEW
Alias: CVE-2026-43217
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-05-06 13:07 UTC by OSIDB Bzimport
Modified: 2026-05-06 21:58 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-05-06 13:07:39 UTC 
In the Linux kernel, the following vulnerability has been resolved:

media: iris: gen2: Add sanity check for session stop

In iris_kill_session, inst->state is set to IRIS_INST_ERROR and
session_close is executed, which will kfree(inst_hfi_gen2->packet).
If stop_streaming is called afterward, it will cause a crash.

Add a NULL check for inst_hfi_gen2->packet before sendling STOP packet
to firmware to fix that.
Comment 1 Keith Grant 2026-05-06 21:56:20 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026050651-CVE-2026-43217-735d@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.