BaseFortify

Publication date: 2026-01-13

Last updated on: 2026-04-03

Assigner: kernel.org

Description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-13

Last Modified

2026-04-03

Generated

2026-07-06

AI Q&A

2026-01-14

EPSS Evaluated

2026-04-03

NVD

CVE-2025-68812

EUVD

EUVD-2026-2310

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's iris media driver. It occurs because there is no sanity check in the iris_vb2_stop_streaming function to verify if the instance state is already IRIS_INST_ERROR. If the state is IRIS_INST_ERROR, the stop streaming operation should be skipped to avoid sending packets to the firmware. Without this check, calling stop_streaming after the session has been killed (which sets the state to IRIS_INST_ERROR and frees certain memory) can cause a crash.

Impact Analysis

This vulnerability can cause a crash in the Linux kernel when stop_streaming is called after the session has been killed and the instance state is set to IRIS_INST_ERROR. This could lead to system instability or denial of service due to the kernel crash.

Hi! I’m here to help you understand CVE-2025-68812. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70