CVE-2026-43058: media: vidtv: fix pass-by-value structs causing MSAN warnings
In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: fix pass-by-value structs causing MSAN warnings
vidtvtsnullwriteinto() and vidtvtspcrwriteinto() take their argument structs by value, causing MSAN to report uninit-value warnings. While only vidtvtsnullwriteinto() has triggered a report so far, both functions share the same issue.
Fix by passing both structs by const pointer instead, avoiding the stack copy of the struct along with its MSAN shadow and origin metadata. The functions do not modify the structs, which is enforced by the const qualifier.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Change vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() to accept both structs by const pointer instead of passing the argument structs by value.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43058?
CVE-2026-43058 has a medium severity rating due to its potential impact on media-related functionality in the Linux kernel.
How do I fix CVE-2026-43058?
To fix CVE-2026-43058, ensure you upgrade to a patched version of the Linux kernel that includes the relevant fixes.
What impact does CVE-2026-43058 have on the Linux kernel?
CVE-2026-43058 may cause Memory Sanitizer (MSAN) warnings due to improper handling of pass-by-value structs.
Which versions of the Linux kernel are affected by CVE-2026-43058?
CVE-2026-43058 affects specific versions of the Linux kernel that utilize vidtv functionality, so check your current kernel version.
Can CVE-2026-43058 be exploited remotely?
CVE-2026-43058 is not considered to have remote exploitability as it primarily affects local operations within the kernel.