CVE-2026-43217
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
06/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: iris: gen2: Add sanity check for session stop<br />
<br />
In iris_kill_session, inst->state is set to IRIS_INST_ERROR and<br />
session_close is executed, which will kfree(inst_hfi_gen2->packet).<br />
If stop_streaming is called afterward, it will cause a crash.<br />
<br />
Add a NULL check for inst_hfi_gen2->packet before sendling STOP packet<br />
to firmware to fix that.