CVE-2026-43142

medium

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases…

Vendor / product: Linux — linux kernel

In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not destroying them. This left stale allocations that were no longer used, especially across resolution changes where new buffers are allocated per the updated requirements. As a result, memory was wasted until session close. Destroy internal buffers once the release response is received from the firmware.

CVSS

5.5

5.5 (CVSS v3.1)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity source: NVD CVSS v3.1 (nvd@nist.gov)

Timeline (UTC)

Published: 2026-05-06 12:16

Modified: 2026-11-11 21:10

NVD status: Analyzed

Last synced 5 hours ago

Verified against the source API 2026-11-11 21:11 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

linux / linux_kernel ≥6.15 <6.18.16, ≥6.19 <6.19.6

Weakness classification (CWE)

CWE-401

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: https://git.kernel.org/stable/c/1dabf00ee206eceb0f08a1fe5d1ce635f9064338

Patch / mitigation: https://git.kernel.org/stable/c/7cde76db8883ec8a3d1456068079ecadbfb15ca5

Patch / mitigation: https://git.kernel.org/stable/c/d4457f23ac0130240053a34be663f0fade3bb371

References

https://git.kernel.org/stable/c/1dabf00ee206eceb0f08a1fe5d1ce635f9064338 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7cde76db8883ec8a3d1456068079ecadbfb15ca5 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d4457f23ac0130240053a34be663f0fade3bb371 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Data sources

NVD CVE API 2.0 — fetched 2026-11-11 21:11 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2026-43142

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs