CVE-2026-43058

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43058", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:55.981Z", "datePublished": "2026-05-02T06:11:50.870Z", "dateUpdated": "2026-06-14T17:44:43.464Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-14T17:44:43.464Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vidtv: fix pass-by-value structs causing MSAN warnings\n\nvidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their\nargument structs by value, causing MSAN to report uninit-value warnings.\nWhile only vidtv_ts_null_write_into() has triggered a report so far,\nboth functions share the same issue.\n\nFix by passing both structs by const pointer instead, avoiding the\nstack copy of the struct along with its MSAN shadow and origin metadata.\nThe functions do not modify the structs, which is enforced by the const\nqualifier."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/test-drivers/vidtv/vidtv_mux.c", "drivers/media/test-drivers/vidtv/vidtv_ts.c", "drivers/media/test-drivers/vidtv/vidtv_ts.h"], "versions": [{"version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "lessThan": "a876d72ceba7fe5444005239f363c105767e0ecf", "status": "affected", "versionType": "git"}, {"version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "lessThan": "a73f84a30975e6c4ae06efd500d31c82564dba10", "status": "affected", "versionType": "git"}, {"version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "lessThan": "c034d8094fee474eb94142c17643eee2919079b7", "status": "affected", "versionType": "git"}, {"version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "lessThan": "e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508", "status": "affected", "versionType": "git"}, {"version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "lessThan": "be57e52e27c7cbfb400a8f255e475cbcff242baa", "status": "affected", "versionType": "git"}, {"version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "lessThan": "6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4", "status": "affected", "versionType": "git"}, {"version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "lessThan": "57b01d945ed68cebe486d495dadc4901a96d3aaa", "status": "affected", "versionType": "git"}, {"version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "lessThan": "1b2820c8a9887981634020db19f1a2425558b88e", "status": "affected", "versionType": "git"}, {"version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "lessThan": "5f8e73bde67e931468bc2a1860d78d72f0c6ba41", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/test-drivers/vidtv/vidtv_mux.c", "drivers/media/test-drivers/vidtv/vidtv_ts.c", "drivers/media/test-drivers/vidtv/vidtv_ts.h"], "versions": [{"version": "5.10", "status": "affected"}, {"version": "0", "lessThan": "5.10", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.258", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.209", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.175", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.136", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.83", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.24", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.14", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.1", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "5.10.258"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "5.15.209"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.1.175"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.6.136"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.12.83"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.18.24"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.19.14"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "7.0.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/a876d72ceba7fe5444005239f363c105767e0ecf"}, {"url": "https://git.kernel.org/stable/c/a73f84a30975e6c4ae06efd500d31c82564dba10"}, {"url": "https://git.kernel.org/stable/c/c034d8094fee474eb94142c17643eee2919079b7"}, {"url": "https://git.kernel.org/stable/c/e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508"}, {"url": "https://git.kernel.org/stable/c/be57e52e27c7cbfb400a8f255e475cbcff242baa"}, {"url": "https://git.kernel.org/stable/c/6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4"}, {"url": "https://git.kernel.org/stable/c/57b01d945ed68cebe486d495dadc4901a96d3aaa"}, {"url": "https://git.kernel.org/stable/c/1b2820c8a9887981634020db19f1a2425558b88e"}, {"url": "https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41"}], "title": "media: vidtv: fix pass-by-value structs causing MSAN warnings", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/media/test-drivers/vidtv/vidtv_mux.c", "drivers/media/test-drivers/vidtv/vidtv_ts.c", "drivers/media/test-drivers/vidtv/vidtv_ts.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "a876d72ceba7fe5444005239f363c105767e0ecf", "status": "affected", "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "versionType": "git"}, {"lessThan": "a73f84a30975e6c4ae06efd500d31c82564dba10", "status": "affected", "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "versionType": "git"}, {"lessThan": "c034d8094fee474eb94142c17643eee2919079b7", "status": "affected", "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "versionType": "git"}, {"lessThan": "e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508", "status": "affected", "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "versionType": "git"}, {"lessThan": "be57e52e27c7cbfb400a8f255e475cbcff242baa", "status": "affected", "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "versionType": "git"}, {"lessThan": "6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4", "status": "affected", "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "versionType": "git"}, {"lessThan": "57b01d945ed68cebe486d495dadc4901a96d3aaa", "status": "affected", "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "versionType": "git"}, {"lessThan": "1b2820c8a9887981634020db19f1a2425558b88e", "status": "affected", "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "versionType": "git"}, {"lessThan": "5f8e73bde67e931468bc2a1860d78d72f0c6ba41", "status": "affected", "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/media/test-drivers/vidtv/vidtv_mux.c", "drivers/media/test-drivers/vidtv/vidtv_ts.c", "drivers/media/test-drivers/vidtv/vidtv_ts.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.10"}, {"lessThan": "5.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.258", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.209", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.175", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.136", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.83", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.24", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.14", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.1", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0F98EDB3-BDF6-4821-9197-1BA4A2E056E2", "versionEndExcluding": "6.6.136", "versionStartIncluding": "5.10", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7F0AE5B5-23AC-4DCC-B37A-51CA1DAE7BA8", "versionEndExcluding": "6.12.83", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "8126B8B8-6D0B-4443-86C1-672AEE893555", "versionEndExcluding": "6.18.24", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D6A8A074-BBF4-4803-ABED-519A839435BB", "versionEndExcluding": "6.19.14", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9B5888AB-7403-4335-89E4-21CC0B48366A", "versionEndExcluding": "7.0.1", "versionStartIncluding": "7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vidtv: fix pass-by-value structs causing MSAN warnings\n\nvidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their\nargument structs by value, causing MSAN to report uninit-value warnings.\nWhile only vidtv_ts_null_write_into() has triggered a report so far,\nboth functions share the same issue.\n\nFix by passing both structs by const pointer instead, avoiding the\nstack copy of the struct along with its MSAN shadow and origin metadata.\nThe functions do not modify the structs, which is enforced by the const\nqualifier."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmedia: vidtv: corregir estructuras pasadas por valor que causan advertencias de MSAN\n\nvidtv_ts_null_write_into() y vidtv_ts_pcr_write_into() toman sus estructuras de argumento por valor, lo que hace que MSAN reporte advertencias de valor no inicializado. Aunque solo vidtv_ts_null_write_into() ha activado un informe hasta ahora, ambas funciones comparten el mismo problema.\n\nSe corrige pasando ambas estructuras por puntero constante en su lugar, evitando la copia en la pila de la estructura junto con su sombra de MSAN y metadatos de origen. Las funciones no modifican las estructuras, lo cual es garantizado por el calificador const."}], "id": "CVE-2026-43058", "lastModified": "2026-11-11T23:10:00.263", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-05-02T07:16:20.830", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1b2820c8a9887981634020db19f1a2425558b88e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/57b01d945ed68cebe486d495dadc4901a96d3aaa"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a73f84a30975e6c4ae06efd500d31c82564dba10"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a876d72ceba7fe5444005239f363c105767e0ecf"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/be57e52e27c7cbfb400a8f255e475cbcff242baa"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c034d8094fee474eb94142c17643eee2919079b7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: media: vidtv: fix pass-by-value structs causing MSAN warnings", "id": "2464629", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464629"}, "csaw": false, "cwe": "CWE-824", "details": ["A flaw was found in the Linux kernel's `vidtv` media component. This issue arises from functions incorrectly passing data structures by value, which can lead to MemorySanitizer (MSAN) reporting uninitialized value warnings. Such warnings indicate a risk of memory corruption or undefined behavior, which could potentially be exploited by a local attacker to impact system stability or integrity."], "name": "CVE-2026-43058", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-02T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43058\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43058\nhttps://lore.kernel.org/linux-cve-announce/2026050254-CVE-2026-43058-4a86@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f90cf6079bf67988f8b1ad1ade70fc89d0080905,e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f90cf6079bf67988f8b1ad1ade70fc89d0080905,be57e52e27c7cbfb400a8f255e475cbcff242baa)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f90cf6079bf67988f8b1ad1ade70fc89d0080905,6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f90cf6079bf67988f8b1ad1ade70fc89d0080905,57b01d945ed68cebe486d495dadc4901a96d3aaa)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f90cf6079bf67988f8b1ad1ade70fc89d0080905,1b2820c8a9887981634020db19f1a2425558b88e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f90cf6079bf67988f8b1ad1ade70fc89d0080905,5f8e73bde67e931468bc2a1860d78d72f0c6ba41)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.10"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.10)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.136,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.83,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.24,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.14,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.1,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-02T09:30:20.159272+00:00", "title": "Linux kernel vidtv driver uninitialized memory due to struct copy", "updated": "2026-05-26T16:00:11.931543+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}