CVE-2025-68812
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
13/01/2026
Last modified:
14/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: iris: Add sanity check for stop streaming<br />
<br />
Add sanity check in iris_vb2_stop_streaming. If inst->state is<br />
already IRIS_INST_ERROR, we should skip the stream_off operation<br />
because it would still send packets to the firmware.<br />
<br />
In iris_kill_session, inst->state is set to IRIS_INST_ERROR and<br />
session_close is executed, which will kfree(inst_hfi_gen2->packet).<br />
If stop_streaming is called afterward, it will cause a crash.<br />
<br />
[bod: remove qcom from patch title]



