CVE-2026-43162

Source
https://cve.org/CVERecord?id=CVE-2026-43162
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43162.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-43162
Downstream
Related
Published
2026-05-06T11:27:40.580Z
Modified
2026-07-21T09:52:43.911167543Z
Summary
media: tegra-video: Fix memory leak in __tegra_channel_try_format()
Details

In the Linux kernel, the following vulnerability has been resolved:

media: tegra-video: Fix memory leak in _tegrachanneltryformat()

The state object allocated by __v4l2subdevstate_alloc() must be freed with _v4l2subdevstatefree() when it is no longer needed.

In __tegrachanneltryformat(), two error paths return directly after v4l2subdevcall() fails, without freeing the allocated 'sdstate' object. This violates the requirement and causes a memory leak.

Fix this by introducing a cleanup label and using goto statements in the error paths to ensure that _v4l2subdevstatefree() is always called before the function returns.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43162.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1ebaeb09830f36c1111b72a95420814225bd761c
Fixed
6c6f419fa9c44a4b7149b0292e01bff47308ba14
Fixed
ca921be7a1174d5d58b28f84b683c2c0079f18c5
Fixed
3ca2f09061736e72ef25eec2597d00f7f44094d3
Fixed
2dff8966a3a889dd9d248a7e15d963b4097efcc5
Fixed
d92e9a18f97a1d19d4c2ff81dcfbe43591f75b5a
Fixed
43e5302d22334f1183dec3e0d5d8007eefe2817c

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43162.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.10.0
Fixed
6.1.167
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.130
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.77
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.17
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43162.json"