CVE-2025-68175

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

media: nxp: imx8-isi: Fix streaming cleanup on release

The current implementation unconditionally calls

mxc_isi_video_cleanup_streaming() in mxc_isi_video_release(). This can

lead to situations where any release call (like from a simple

"v4l2-ctl -l") may release a currently streaming queue when called on

such a device.

This is reproducible on an i.MX8MP board by streaming from an ISI

capture device using gstreamer:

gst-launch-1.0 -v v4l2src device=/dev/videoX ! \

video/x-raw,format=GRAY8,width=1280,height=800,framerate=1/120 ! \

fakesink

While this stream is running, querying the caps of the same device

provokes the error state:

v4l2-ctl -l -d /dev/videoX

This results in the following trace:

[ 155.452152] ------------[ cut here ]------------

[ 155.452163] WARNING: CPU: 0 PID: 1708 at drivers/media/platform/nxp/imx8-isi/imx8-isi-pipe.c:713 mxc_isi_pipe_irq_handler+0x19c/0x1b0 [imx8_isi]

[ 157.004

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References