CVE-2026-43217

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A crash can occur in the iris driver for gen2 hardware. In the iris kill session() function, the inst->state is set to IRIS INST ERROR and session close() is executed, which frees the memory allocated to inst hfi gen2->packet. If stop streaming() is called after this process, it attempts to access the freed memory when sending a STOP packet to the firmware, leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.