Medium 5.5Published May 6, 2026

CVE-2026-43235media: iris: Add missing platform data entries for SM8750

Updated under an hour ago (Oct 27, 2026, 8:25 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: iris: Add missing platform data entries for SM8750 Two platform-data fields for SM8750 were missed: - get_vpu_buffer_size = iris_vpu33_buf_size Without this, the driver fails to allocate the required internal buffers, leading to basic decode/encode failures during session bring-up. - max_core_mbps = ((7680 * 4320) / 256) * 60 Without this capability exposed, capability checks are incomplete and v4l2-compliance for encoder fails.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a6882431a138ac352a6e20ec3b85f97f84501329 before 1aa5833f29b88c16e9ad49a1782927754f3af742; from a6882431a138ac352a6e20ec3b85f97f84501329 before c7b2105a1cad1737eb877cdb4865618927623dd4; from a6882431a138ac352a6e20ec3b85f97f84501329 before bbef55f414100853d5bcea56a41f8b171bac8fcb	CNA record
linux linux_kernel linux:linux_kernel	from 6.18 before 6.18.17; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/1aa5833f29b88c16e9ad49a1782927754f3af742	patch
https://git.kernel.org/stable/c/c7b2105a1cad1737eb877cdb4865618927623dd4	patch
https://git.kernel.org/stable/c/bbef55f414100853d5bcea56a41f8b171bac8fcb	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.