CVE-2025-68812

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
13/01/2026
Last modified:
14/01/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: iris: Add sanity check for stop streaming<br /> <br /> Add sanity check in iris_vb2_stop_streaming. If inst-&gt;state is<br /> already IRIS_INST_ERROR, we should skip the stream_off operation<br /> because it would still send packets to the firmware.<br /> <br /> In iris_kill_session, inst-&gt;state is set to IRIS_INST_ERROR and<br /> session_close is executed, which will kfree(inst_hfi_gen2-&gt;packet).<br /> If stop_streaming is called afterward, it will cause a crash.<br /> <br /> [bod: remove qcom from patch title]

Impact