Executive brief
A vulnerability in the Linux kernel's NXP i.MX8 Image Sensor Interface (ISI) driver could allow a local user to cause a system crash or potentially gain unauthorized access. The issue occurs when the system incorrectly cleans up video streaming resources while they are still in use, such as when a user queries camera capabilities while a video is recording. This can lead to unstable system behavior or a complete denial of service on affected NXP-based hardware.
Technical details
A vulnerability in the NXP i.MX8 ISI driver (imx8-isi) stems from the unconditional calling of mxc_isi_video_cleanup_streaming() within mxc_isi_video_release(). This logic error allows a secondary process (e.g., running v4l2-ctl) to trigger a cleanup of a streaming queue that is still actively being used by another process (e.g., GStreamer). This results in a kernel trace/warning in mxc_isi_pipe_irq_handler and potential memory corruption or system instability. The fix involves migrating streaming preparation and cleanup to the proper vb2 .prepare_streaming() and .unprepare_streaming() operations to ensure resources are managed according to the actual state of the streaming queue.
Affected products
- Linux Linux Kernel 6.4 to 6.12.80, 6.17.8
Timeline
- 2025-12-16: disclosed: CVE published
- 2025-11-13: patched: Fix committed to stable tree