CVE-2026-43151

Revert "media: iris: Add sanity check for stop streaming"

MEDIUM
5.5
CVSS Score
Published: May 6, 2026 at 11:27 AM UTC
Updated: June 17, 2026 at 10:49 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: Revert "media: iris: Add sanity check for stop streaming" This reverts commit ad699fa78b59241c9d71a8cafb51525f3dab04d4. Revert the check that skipped stop_streaming when the instance was in IRIS_INST_ERROR, as it caused multiple regressions: 1. Buffers were not returned to vb2 when the instance was already in error state, triggering warnings in the vb2 core because buffer completion was skipped. 2. If a session failed early (e.g. unsupported configuration), the instance transitioned to IRIS_INST_ERROR. When userspace attempted to stop streaming for cleanup, stop_streaming was skipped due to the added check, preventing proper teardown and leaving the firmware in an inconsistent state.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.18.3 ≤ v < 6.18.166.19 ≤ v < 6.19.66.19 ≤ v < 7.06.18.36.19ad699fa78b59241c9d71a8cafb51525f3dab04d4f8b136296722e258ec43237a35f72c92a6d4501a
Vendor states this is fixed in 370e19042fb8ac68109f8bdb0fdd8118baf39318 (fixed)
Vendor states this is fixed in a58b9d1c1cf81c0b29f1983c63c3e0c0caa68398 (fixed)
Vendor states this is fixed in bd4f8fa216182f33c06d4c1e162975a0c42fb14e (fixed)
Vendor states this is fixed in 6.18.16 (unaffected)
Vendor states this is fixed in 6.19 (unaffected)
Vendor states this is fixed in 6.19.6 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card