CVE Database›Document archive›CVE-2026-43217

CVE-2026-43217

kernel: media: iris: gen2: Add sanity check for session stop

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's media: iris: gen2 component. When a session is stopped, a memory deallocation occurs. If a subsequent streaming stop operation is initiated without proper validation, it attempts to access already freed memory. This can be triggered by a local attacker or a malicious application, leading to a system crash and a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference