Linux Kernel Media Function Vulnerability in vidtv by The Linux Foundation

CVE-2026-43058

What is CVE-2026-43058?

A vulnerability exists within the Linux kernel's media subsystem, particularly in the vidtv functions. The functions vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() are affected as they take their argument structs by value, which can trigger uninitialized value warnings reported by the Memory Sanitizer (MSAN). Although only vidtv_ts_null_write_into() has been documented to cause such reports thus far, both functions share this underlying issue. The vulnerability has been addressed by altering the parameter passing method to use const pointers instead of passing by value. This change prevents unnecessary stack copying of the struct and maintains the integrity of the MSAN shadow and origin metadata.

References