PT-2026-36583 · Linux · Linux

Published 2026-05-02 · Updated 2026-05-02 · CVE-2026-43058

NVD

In the Linux kernel, the following vulnerability has been resolved:

media: vidtv: fix pass-by-value structs causing MSAN warnings

vidtv ts null write into() and vidtv ts pcr write into() take their argument structs by value, causing MSAN to report uninit-value warnings. While only vidtv ts null write into() has triggered a report so far, both functions share the same issue.

Fix by passing both structs by const pointer instead, avoiding the stack copy of the struct along with its MSAN shadow and origin metadata. The functions do not modify the structs, which is enforced by the const qualifier.

Related Identifiers

CVE-2026-43058

Affected Products

Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-43058 · Security Note
• https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41 · Note
• https://git.kernel.org/stable/c/1b2820c8a9887981634020db19f1a2425558b88e · Note
• https://git.kernel.org/stable/c/6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4 · Note
• https://git.kernel.org/stable/c/be57e52e27c7cbfb400a8f255e475cbcff242baa · Note
• https://git.kernel.org/stable/c/57b01d945ed68cebe486d495dadc4901a96d3aaa · Note
• https://git.kernel.org/stable/c/e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508 · Note