CVE-2026-89869

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iris vpu power off() function where the use of disable irq nosync() fails to wait for queued threaded IRQ handlers to complete before returning. This can lead to a situation where a threaded IRQ handler continues to execute after the VPU has been powered down, resulting in unauthorized access to hardware registers post-power-off.

Recommendations Replace the disable irq nosync() function with disable irq() to ensure the power-off process waits for all in-flight threaded IRQ handlers to finish.