Deadlock Issue in Media Subsystem of Linux Kernel

CVE-2025-39712

What is CVE-2025-39712?

A deadlock vulnerability exists in the media subsystem of the Linux kernel, specifically affecting the mt9m114 driver. This issue arises when processing frame intervals with the V4L2 subdev pad operations, leading to potential system instability. The deadlock occurs because the driver is acquiring a lock that should solely be managed by the caller. The resolution involves removing unnecessary lock acquisitions from the functions responsible for setting and getting the frame interval.

References