Executive brief
A vulnerability in the Linux kernel's Iris media driver for certain Qualcomm processors can cause video encoding and decoding to fail. This occurs because the system fails to allocate necessary internal memory buffers during video sessions. An attacker with local access could potentially exploit this to cause a denial-of-service by crashing or disabling media processing capabilities.
Technical details
A vulnerability in the 'iris' media driver within the Linux kernel stems from missing platform data entries for the SM8750 SoC. Specifically, the 'get_vpu_buffer_size' and 'max_core_mbps' fields were not initialized in 'iris_platform_gen2.c'. This omission causes the driver to fail internal buffer allocations during session bring-up and results in failed v4l2-compliance checks. A local attacker can leverage this to cause a denial-of-service (DoS) by triggering decode/encode failures. The issue has been resolved by correctly mapping 'iris_vpu33_buf_size' and defining the maximum core throughput.
Affected products
- Linux Linux Kernel 6.18 to 6.18.17, 6.19 to 6.19.6
Timeline
- 2025-12-18: other: Patch authored
- 2026-05-06: disclosed: CVE published
- 2026-05-12: advisory: NVD enrichment and CVSS assignment