CVE-2026-43297: media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()
In the Linux kernel, the following vulnerability has been resolved:
media: rockchip: rga: Fix possible ERRPTR dereference in rgabufinit()
rgagetframe() can return ERRPTR(-EINVAL) when buffer type is unsupported or invalid. rgabufinit() does not check the return value and unconditionally dereferences the pointer when accessing f->size.
Add proper ERRPTR checking and return the error to prevent dereferencing an invalid pointer.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43297?
CVE-2026-43297 is classified as a medium severity vulnerability due to the potential for ERR_PTR dereference.
How do I fix CVE-2026-43297?
To fix CVE-2026-43297, update the Linux kernel to the latest stable version where the vulnerability has been addressed.
Which versions of the Linux kernel are affected by CVE-2026-43297?
CVE-2026-43297 affects specific versions of the Linux kernel that utilize the rockchip rga component.
What can happen if CVE-2026-43297 is exploited?
If exploited, CVE-2026-43297 may lead to crashes or undefined behavior due to dereferencing an invalid pointer.
Who is primarily affected by CVE-2026-43297?
Users running applications that utilize the media: rockchip rga functionality within the Linux kernel are primarily affected by CVE-2026-43297.