CVE-2026-43256: media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()
In the Linux kernel, the following vulnerability has been resolved:
media: qcom: camss: vfe: Fix out-of-bounds access in vfeisrregupdate()
vfeisr() iterates using MSMVFEIMAGEMASTERSNUM(7) as the loop bound and passes the index to vfeisrregupdate(). However, vfe->line[] array is defined with VFELINENUMMAX(4):
struct vfeline line[VFELINENUMMAX];
When index is 4, 5, 6, the access to vfe->line[lineid] exceeds the array bounds and resulting in out-of-bounds memory access.
Fix this by using separate loops for output lines and write masters.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Backport and apply the upstream Linux kernel fix for the CAMSS vfe out-of-bounds access in vfe_isr_reg_update (media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43256?
The severity of CVE-2026-43256 is classified as high due to its potential for causing an out-of-bounds access that can lead to system instability.
How do I fix CVE-2026-43256?
To fix CVE-2026-43256, update your Linux kernel to the latest version where this vulnerability has been patched.
What platforms are affected by CVE-2026-43256?
CVE-2026-43256 affects the Linux kernel, specifically the Qualcomm camera sub-system components.
What does CVE-2026-43256 impact?
CVE-2026-43256 impacts the functionality of the VFE (Video Front End) ISR by potentially causing out-of-bounds memory access.
Is CVE-2026-43256 being actively exploited?
As of now, there have been no public reports of active exploitation of CVE-2026-43256.