CVE-2026-43058

medium

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtv_ts_null_write_into()…

Vendor / product: Linux — linux kernel

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their argument structs by value, causing MSAN to report uninit-value warnings. While only vidtv_ts_null_write_into() has triggered a report so far, both functions share the same issue. Fix by passing both structs by const pointer instead, avoiding the stack copy of the struct along with its MSAN shadow and origin metadata. The functions do not modify the structs, which is enforced by the const qualifier.

CVSS

5.5

5.5 (CVSS v3.1)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity source: NVD CVSS v3.1 (nvd@nist.gov)

Timeline (UTC)

Published: 2026-05-02 07:16

Modified: 2026-11-11 23:10

NVD status: Modified

Last synced 3 hours ago

Verified against the source API 2026-11-11 23:13 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

linux / linux_kernel ≥5.10 <6.6.136, ≥6.7 <6.12.83, ≥6.13 <6.18.24, ≥6.19 <6.19.14, ≥7.0 <7.0.1

Weakness classification (CWE)

CWE-476

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: https://git.kernel.org/stable/c/1b2820c8a9887981634020db19f1a2425558b88e

Patch / mitigation: https://git.kernel.org/stable/c/57b01d945ed68cebe486d495dadc4901a96d3aaa

Patch / mitigation: https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41

Patch / mitigation: https://git.kernel.org/stable/c/6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4

Patch / mitigation: https://git.kernel.org/stable/c/be57e52e27c7cbfb400a8f255e475cbcff242baa

Patch / mitigation: https://git.kernel.org/stable/c/e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508

References

https://git.kernel.org/stable/c/1b2820c8a9887981634020db19f1a2425558b88e 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/57b01d945ed68cebe486d495dadc4901a96d3aaa 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a73f84a30975e6c4ae06efd500d31c82564dba10 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a876d72ceba7fe5444005239f363c105767e0ecf 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/be57e52e27c7cbfb400a8f255e475cbcff242baa 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c034d8094fee474eb94142c17643eee2919079b7 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Data sources

NVD CVE API 2.0 — fetched 2026-11-11 23:13 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2026-43058

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs