Linux Kernel Missing Platform Data Vulnerability in Media Iris Driver for SM8750

Vulnerability

A vulnerability exists in the Linux kernel's media iris driver for the SM8750 platform due to missing platform data entries. This omission prevents the driver from allocating necessary internal buffers, causing basic decode and encode failures during session initialization. Additionally, the absence of a specified maximum core bandwidth capability disrupts proper capability checks, leading to compliance failures with the Video4Linux2 (v4l2) encoder standards.

Impact

The vulnerability causes decoding and encoding failures in the media iris driver, disrupting normal functionality and compliance with v4l2 standards for encoding.

Reproduction

The vulnerability can be reproduced by using the media iris driver on a platform with the SM8750 chipset. The missing platform data entries can be added manually to the driver's platform data structure for SM8750.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel official website.

Added: May 6, 2026, 1:17 PM
Updated: May 6, 2026, 1:17 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.9
remediation
7.7
relevance
7.6
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.