CVE-2026-43310

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43310", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:56.000Z", "datePublished": "2026-05-08T13:11:28.372Z", "dateUpdated": "2026-10-30T12:25:25.171Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:25:25.171Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC\n\nFor the i.MX8MQ platform, there is a hardware limitation: the g1 VPU and\ng2 VPU cannot decode simultaneously; otherwise, it will cause below bus\nerror and produce corrupted pictures, even potentially lead to system hang.\n\n[ 110.527986] hantro-vpu 38310000.video-codec: frame decode timed out.\n[ 110.583517] hantro-vpu 38310000.video-codec: bus error detected.\n\nTherefore, it is necessary to ensure that g1 and g2 operate alternately.\nThis allows for successful multi-instance decoding of H.264 and HEVC.\n\nTo achieve this, g1 and g2 share the same v4l2_m2m_dev, and then the\nv4l2_m2m_dev can handle the scheduling."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/platform/verisilicon/hantro.h", "drivers/media/platform/verisilicon/hantro_drv.c", "drivers/media/platform/verisilicon/imx8m_vpu_hw.c"], "versions": [{"version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "lessThan": "42a9fbccb33a38c5a9e0a84680939da8eae4f60e", "status": "affected", "versionType": "git"}, {"version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "lessThan": "f988fbf0536b42f6a05ccc1ac709d60236ec1aa6", "status": "affected", "versionType": "git"}, {"version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "lessThan": "f2efc1e8ab65bdb9b892af132887323e4df92f02", "status": "affected", "versionType": "git"}, {"version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "lessThan": "5133ef7c893c2c3aee7dd12503dc480de9dbfbb5", "status": "affected", "versionType": "git"}, {"version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "lessThan": "286d629d10640bc22f3bf46aa4f356eb7975e862", "status": "affected", "versionType": "git"}, {"version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "lessThan": "e0203ddf9af7c8e170e1e99ce83b4dc07f0cd765", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/platform/verisilicon/hantro.h", "drivers/media/platform/verisilicon/hantro_drv.c", "drivers/media/platform/verisilicon/imx8m_vpu_hw.c"], "versions": [{"version": "5.14", "status": "affected"}, {"version": "0", "lessThan": "5.14", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.114", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.57", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.6", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.12.114"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.18.57"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.19.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/42a9fbccb33a38c5a9e0a84680939da8eae4f60e"}, {"url": "https://git.kernel.org/stable/c/f988fbf0536b42f6a05ccc1ac709d60236ec1aa6"}, {"url": "https://git.kernel.org/stable/c/f2efc1e8ab65bdb9b892af132887323e4df92f02"}, {"url": "https://git.kernel.org/stable/c/5133ef7c893c2c3aee7dd12503dc480de9dbfbb5"}, {"url": "https://git.kernel.org/stable/c/286d629d10640bc22f3bf46aa4f356eb7975e862"}, {"url": "https://git.kernel.org/stable/c/e0203ddf9af7c8e170e1e99ce83b4dc07f0cd765"}], "title": "media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/media/platform/verisilicon/hantro.h", "drivers/media/platform/verisilicon/hantro_drv.c", "drivers/media/platform/verisilicon/imx8m_vpu_hw.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "42a9fbccb33a38c5a9e0a84680939da8eae4f60e", "status": "affected", "version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "versionType": "git"}, {"lessThan": "f988fbf0536b42f6a05ccc1ac709d60236ec1aa6", "status": "affected", "version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "versionType": "git"}, {"lessThan": "f2efc1e8ab65bdb9b892af132887323e4df92f02", "status": "affected", "version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "versionType": "git"}, {"lessThan": "5133ef7c893c2c3aee7dd12503dc480de9dbfbb5", "status": "affected", "version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "versionType": "git"}, {"lessThan": "286d629d10640bc22f3bf46aa4f356eb7975e862", "status": "affected", "version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "versionType": "git"}, {"lessThan": "e0203ddf9af7c8e170e1e99ce83b4dc07f0cd765", "status": "affected", "version": "cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/media/platform/verisilicon/hantro.h", "drivers/media/platform/verisilicon/hantro_drv.c", "drivers/media/platform/verisilicon/imx8m_vpu_hw.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.14"}, {"lessThan": "5.14", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.114", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.57", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "2890948B-368D-4087-9F41-F282960708C7", "versionEndExcluding": "6.19.6", "versionStartIncluding": "5.14", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC\n\nFor the i.MX8MQ platform, there is a hardware limitation: the g1 VPU and\ng2 VPU cannot decode simultaneously; otherwise, it will cause below bus\nerror and produce corrupted pictures, even potentially lead to system hang.\n\n[ 110.527986] hantro-vpu 38310000.video-codec: frame decode timed out.\n[ 110.583517] hantro-vpu 38310000.video-codec: bus error detected.\n\nTherefore, it is necessary to ensure that g1 and g2 operate alternately.\nThis allows for successful multi-instance decoding of H.264 and HEVC.\n\nTo achieve this, g1 and g2 share the same v4l2_m2m_dev, and then the\nv4l2_m2m_dev can handle the scheduling."}], "id": "CVE-2026-43310", "lastModified": "2026-10-30T13:18:50.347", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-05-08T14:16:38.370", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/286d629d10640bc22f3bf46aa4f356eb7975e862"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/42a9fbccb33a38c5a9e0a84680939da8eae4f60e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5133ef7c893c2c3aee7dd12503dc480de9dbfbb5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e0203ddf9af7c8e170e1e99ce83b4dc07f0cd765"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f2efc1e8ab65bdb9b892af132887323e4df92f02"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f988fbf0536b42f6a05ccc1ac709d60236ec1aa6"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC", "id": "2468130", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468130"}, "csaw": false, "cwe": "CWE-770", "details": ["A flaw was found in the Linux kernel's Verisilicon media driver. On the i.MX8MQ platform, simultaneous decoding of H.264 and HEVC video streams by the g1 and g2 Video Processing Units (VPUs) can lead to a bus error. This issue can result in corrupted video output and potentially cause a system hang, leading to a Denial of Service."], "name": "CVE-2026-43310", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43310\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43310\nhttps://lore.kernel.org/linux-cve-announce/2026050859-CVE-2026-43310-4485@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c,286d629d10640bc22f3bf46aa4f356eb7975e862)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c,e0203ddf9af7c8e170e1e99ce83b4dc07f0cd765)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.14"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.14)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.6,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-08T15:45:08.663484+00:00", "updated": "2026-05-15T19:30:05.984453+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-770"]}