In the Linux kernel media driver for Verisilicon VPUs on the i.MX8MQ board, running the g1 and g2 VPU sub‑systems simultaneously can trigger a bus error that corrupts decoded frames and may cause a system crash. The weakness arises from inadequate scheduling between the two hardware units, resulting in a denial‑of‑service impact that affects only availability; there is no direct threat to confidentiality or integrity.

The flaw affects any device that runs the Linux kernel with the Verisilicon H.264/HEVC driver on an i.MX8MQ system. No specific kernel release is listed, so any kernel incorporating the affected driver code before the patch is vulnerable.

The CVSS score is not publicly disclosed, and the EPSS score is unavailable; the flaw is not listed in CISA’s KEV catalog. The only practical attack vector is local: a user able to initiate media decoding—such as a malicious video stream or application—could trigger the bus error, leading to frame corruption or a full system hang. Exploitation requires local or privileged access to the device and delivers a denial‑of‑service effect.