CVE-2026-43217
kernel: media: iris: gen2: Add sanity check for session stop
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 6, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's media: iris: gen2 component. When a session is stopped, a memory deallocation occurs. If a subsequent streaming stop operation is initiated without proper validation, it attempts to access already freed memory. This can be triggered by a local attacker or a malicious application, leading to a system crash and a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference