Riskcovery

CVE-2026-89869

media: qcom: iris: use disable_irq() during power-off

State
Published
Severity
Not scored
Published
Sep 16, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: qcom: iris: use disable_irq() during power-off

The IRQ is registered as a threaded IRQ.

Using disable_irq_nosync() in iris_vpu_power_off() does not wait for an already queued threaded IRQ handler to complete before returning.

As a result, a threaded IRQ handler may still run after the VPU has been powered down and access hardware registers after power-off.

Replace disable_irq_nosync() with disable_irq() so the power-off path waits for any in-flight threaded IRQ handler to complete before returning.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bb8a95aa038e099f5ec82c466e996b006e05abd7 to before ff98cd2b8b54cf96bccace2f7b7e4775cdccaf02Affected
  • bb8a95aa038e099f5ec82c466e996b006e05abd7 to before d7f34cbaced92069400fc5d71fefe3cb4c748da8Affected
  • bb8a95aa038e099f5ec82c466e996b006e05abd7 to before b9c2215bdedc9c532a7e9d57ec49ee1b6381f863Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.51 through 6.18.*Not affected
  • 7.2.5 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.