CVE-2026-43146: media: iris: Add buffer to list only after successful allocation
In the Linux kernel, the following vulnerability has been resolved:
media: iris: Add buffer to list only after successful allocation
Move listaddtail() to after dmaallocattrs() succeeds when creating internal buffers. Previously, the buffer was enqueued in buffers->list before the DMA allocation. If the allocation failed, the function returned -ENOMEM while leaving a partially initialized buffer in the list, which could lead to inconsistent state and potential leaks.
By adding the buffer to the list only after dmaallocattrs() succeeds, we ensure the list contains only valid, fully initialized buffers.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43146?
CVE-2026-43146 has a medium severity rating of 5.5 on the CVSS scale.
How do I fix CVE-2026-43146?
A patch is available to address CVE-2026-43146, which should be applied to the affected systems.
What are the potential impacts of CVE-2026-43146?
CVE-2026-43146 can lead to denial of service due to improper buffer handling in the Linux kernel.
Which systems are affected by CVE-2026-43146?
CVE-2026-43146 affects the Linux kernel, specifically the media/iris component.
When was CVE-2026-43146 published?
CVE-2026-43146 was published on May 6, 2026.