CVE-2026-89869media: qcom: iris: use disable_irq() during power-off
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: use disable_irq() during power-off The IRQ is registered as a threaded IRQ. Using disable_irq_nosync() in iris_vpu_power_off() does not wait for an already queued threaded IRQ handler to complete before returning. As a result, a threaded IRQ handler may still run after the VPU has been powered down and access hardware registers after power-off. Replace disable_irq_nosync() with disable_irq() so the power-off path waits for any in-flight threaded IRQ handler to complete before returning.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from bb8a95aa038e099f5ec82c466e996b006e05abd7 before ff98cd2b8b54cf96bccace2f7b7e4775cdccaf02; from bb8a95aa038e099f5ec82c466e996b006e05abd7 before d7f34cbaced92069400fc5d71fefe3cb4c748da8; from bb8a95aa038e099f5ec82c466e996b006e05abd7 before b9c2215bdedc9c532a7e9d57ec49ee1b6381f863 | CNA record |
References
- https://git.kernel.org/stable/c/ff98cd2b8b54cf96bccace2f7b7e4775cdccaf02
- https://git.kernel.org/stable/c/d7f34cbaced92069400fc5d71fefe3cb4c748da8
- https://git.kernel.org/stable/c/b9c2215bdedc9c532a7e9d57ec49ee1b6381f863
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.