CVE-2026-43301

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43301", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:56.000Z", "datePublished": "2026-05-08T13:11:22.234Z", "dateUpdated": "2026-05-11T22:21:54.560Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:21:54.560Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: chips-media: wave5: Fix PM runtime usage count underflow\n\nReplace pm_runtime_put_sync() with pm_runtime_dont_use_autosuspend() in\nthe remove path to properly pair with pm_runtime_use_autosuspend() from\nprobe. This allows pm_runtime_disable() to handle reference count cleanup\ncorrectly regardless of current suspend state.\n\nThe driver calls pm_runtime_put_sync() unconditionally in remove, but the\ndevice may already be suspended due to autosuspend configured in probe.\nWhen autosuspend has already suspended the device, the usage count is 0,\nand pm_runtime_put_sync() decrements it to -1.\n\nThis causes the following warning on module unload:\n\n ------------[ cut here ]------------\n WARNING: CPU: 1 PID: 963 at kernel/kthread.c:1430\n kthread_destroy_worker+0x84/0x98\n ...\n vdec 30210000.video-codec: Runtime PM usage count underflow!"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/platform/chips-media/wave5/wave5-vpu.c"], "versions": [{"version": "9707a6254a8a6b978bde811a44fe07d86c229d1c", "lessThan": "3a278a55ead50db2444c8f01410c7f5a68723990", "status": "affected", "versionType": "git"}, {"version": "9707a6254a8a6b978bde811a44fe07d86c229d1c", "lessThan": "0bffda02317989f8d5cdc2d4462a4110b1290cf0", "status": "affected", "versionType": "git"}, {"version": "9707a6254a8a6b978bde811a44fe07d86c229d1c", "lessThan": "9cf4452e824c1e2d41c9c0b13cc8a32a0a7dec38", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/platform/chips-media/wave5/wave5-vpu.c"], "versions": [{"version": "6.8", "status": "affected"}, {"version": "0", "lessThan": "6.8", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.16", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.6", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.18.16"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.19.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/3a278a55ead50db2444c8f01410c7f5a68723990"}, {"url": "https://git.kernel.org/stable/c/0bffda02317989f8d5cdc2d4462a4110b1290cf0"}, {"url": "https://git.kernel.org/stable/c/9cf4452e824c1e2d41c9c0b13cc8a32a0a7dec38"}], "title": "media: chips-media: wave5: Fix PM runtime usage count underflow", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/media/platform/chips-media/wave5/wave5-vpu.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "3a278a55ead50db2444c8f01410c7f5a68723990", "status": "affected", "version": "9707a6254a8a6b978bde811a44fe07d86c229d1c", "versionType": "git"}, {"lessThan": "0bffda02317989f8d5cdc2d4462a4110b1290cf0", "status": "affected", "version": "9707a6254a8a6b978bde811a44fe07d86c229d1c", "versionType": "git"}, {"lessThan": "9cf4452e824c1e2d41c9c0b13cc8a32a0a7dec38", "status": "affected", "version": "9707a6254a8a6b978bde811a44fe07d86c229d1c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/media/platform/chips-media/wave5/wave5-vpu.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.8"}, {"lessThan": "6.8", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.16", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "12C05E5A-F731-4E9B-94E0-2E3F7FBA69A3", "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.8", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: chips-media: wave5: Fix PM runtime usage count underflow\n\nReplace pm_runtime_put_sync() with pm_runtime_dont_use_autosuspend() in\nthe remove path to properly pair with pm_runtime_use_autosuspend() from\nprobe. This allows pm_runtime_disable() to handle reference count cleanup\ncorrectly regardless of current suspend state.\n\nThe driver calls pm_runtime_put_sync() unconditionally in remove, but the\ndevice may already be suspended due to autosuspend configured in probe.\nWhen autosuspend has already suspended the device, the usage count is 0,\nand pm_runtime_put_sync() decrements it to -1.\n\nThis causes the following warning on module unload:\n\n ------------[ cut here ]------------\n WARNING: CPU: 1 PID: 963 at kernel/kthread.c:1430\n kthread_destroy_worker+0x84/0x98\n ...\n vdec 30210000.video-codec: Runtime PM usage count underflow!"}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nmedia: chips-media: wave5: Correcci\u00f3n del subdesbordamiento del contador de uso de PM runtime\n\nReemplazar pm_runtime_put_sync() con pm_runtime_dont_use_autosuspend() en la ruta de eliminaci\u00f3n para emparejar correctamente con pm_runtime_use_autosuspend() de la sonda. Esto permite que pm_runtime_disable() maneje la limpieza del contador de referencias correctamente, independientemente del estado de suspensi\u00f3n actual.\n\nEl controlador llama a pm_runtime_put_sync() incondicionalmente en la eliminaci\u00f3n, pero el dispositivo ya puede estar suspendido debido al autosuspend configurado en la sonda. Cuando el autosuspend ya ha suspendido el dispositivo, el contador de uso es 0, y pm_runtime_put_sync() lo decrementa a -1.\n\nEsto causa la siguiente advertencia al descargar el m\u00f3dulo:\n\n ------------[ cortar aqu\u00ed ]------------\n ADVERTENCIA: CPU: 1 PID: 963 en kernel/kthread.c:1430\n kthread_destroy_worker+0x84/0x98\n ...\n vdec 30210000.video-codec: \u00a1Subdesbordamiento del contador de uso de PM runtime!"}], "id": "CVE-2026-43301", "lastModified": "2026-11-11T20:10:00.273", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-05-08T14:16:37.340", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0bffda02317989f8d5cdc2d4462a4110b1290cf0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3a278a55ead50db2444c8f01410c7f5a68723990"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9cf4452e824c1e2d41c9c0b13cc8a32a0a7dec38"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-191"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: media: chips-media: wave5: Fix PM runtime usage count underflow", "id": "2468118", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468118"}, "csaw": false, "details": ["No description is available for this CVE."], "name": "CVE-2026-43301", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43301\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43301\nhttps://lore.kernel.org/linux-cve-announce/2026050856-CVE-2026-43301-e11d@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[9707a6254a8a6b978bde811a44fe07d86c229d1c,3a278a55ead50db2444c8f01410c7f5a68723990)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[9707a6254a8a6b978bde811a44fe07d86c229d1c,0bffda02317989f8d5cdc2d4462a4110b1290cf0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[9707a6254a8a6b978bde811a44fe07d86c229d1c,9cf4452e824c1e2d41c9c0b13cc8a32a0a7dec38)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.8"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.16,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.6,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-08T15:45:08.663928+00:00", "updated": "2026-05-15T16:30:03.925928+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}