CVE-2026-43151

Summary

In the Linux kernel, the following vulnerability has been resolved:

Revert "media: iris: Add sanity check for stop streaming"

This reverts commit ad699fa78b59241c9d71a8cafb51525f3dab04d4.

Revert the check that skipped stop_streaming when the instance was in IRIS_INST_ERROR, as it caused multiple regressions:

  1. Buffers were not returned to vb2 when the instance was already in error state, triggering warnings in the vb2 core because buffer completion was skipped.

  2. If a session failed early (e.g. unsupported configuration), the instance transitioned to IRIS_INST_ERROR. When userspace attempted to stop streaming for cleanup, stop_streaming was skipped due to the added check, preventing proper teardown and leaving the firmware in an inconsistent state.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf8b136296722e258ec43237a35f72c92a6d4501a < bd4f8fa216182f33c06d4c1e162975a0c42fb14eaffected
LinuxLinuxad699fa78b59241c9d71a8cafb51525f3dab04d4 < a58b9d1c1cf81c0b29f1983c63c3e0c0caa68398affected
LinuxLinuxad699fa78b59241c9d71a8cafb51525f3dab04d4 < 370e19042fb8ac68109f8bdb0fdd8118baf39318affected
LinuxLinux6.18.3 < 6.18.16affected
LinuxLinux6.19affected
LinuxLinux0 < 6.19unaffected
LinuxLinux6.18.16 <= 6.18.*unaffected
LinuxLinux6.19.6 <= 6.19.*unaffected
LinuxLinux7.0 <= *unaffected

Weaknesses

References