CVE-2026-43058

media: vidtv: fix pass-by-value structs causing MSAN warnings

State: Published
Severity: Not scored
Published: May 2, 2026
Updated: Jun 14, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: vidtv: fix pass-by-value structs causing MSAN warnings

vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their argument structs by value, causing MSAN to report uninit-value warnings. While only vidtv_ts_null_write_into() has triggered a report so far, both functions share the same issue.

Fix by passing both structs by const pointer instead, avoiding the stack copy of the struct along with its MSAN shadow and origin metadata. The functions do not modify the structs, which is enforced by the const qualifier.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before a876d72ceba7fe5444005239f363c105767e0ecfAffected f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before a73f84a30975e6c4ae06efd500d31c82564dba10Affected f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before c034d8094fee474eb94142c17643eee2919079b7Affected f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508Affected f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before be57e52e27c7cbfb400a8f255e475cbcff242baaAffected f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before 6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4Affected f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before 57b01d945ed68cebe486d495dadc4901a96d3aaaAffected f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before 1b2820c8a9887981634020db19f1a2425558b88eAffected f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before 5f8e73bde67e931468bc2a1860d78d72f0c6ba41Affected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.136 through 6.6.Not affected 6.12.83 through 6.12.Not affected 6.18.24 through 6.18.Not affected 6.19.14 through 6.19.Not affected 7.0.1 through 7.0.Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before a876d72ceba7fe5444005239f363c105767e0ecfAffected
f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before a73f84a30975e6c4ae06efd500d31c82564dba10Affected
f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before c034d8094fee474eb94142c17643eee2919079b7Affected
f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508Affected
f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before be57e52e27c7cbfb400a8f255e475cbcff242baaAffected
f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before 6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4Affected
f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before 57b01d945ed68cebe486d495dadc4901a96d3aaaAffected
f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before 1b2820c8a9887981634020db19f1a2425558b88eAffected
f90cf6079bf67988f8b1ad1ade70fc89d0080905 to before 5f8e73bde67e931468bc2a1860d78d72f0c6ba41Affected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.136 through 6.6.*Not affected
6.12.83 through 6.12.*Not affected
6.18.24 through 6.18.*Not affected
6.19.14 through 6.19.*Not affected
7.0.1 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.