CVE-2026-43146

media: iris: Add buffer to list only after successful allocation

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: iris: Add buffer to list only after successful allocation

Move `list_add_tail()` to after `dma_alloc_attrs()` succeeds when creating internal buffers. Previously, the buffer was enqueued in `buffers->list` before the DMA allocation. If the allocation failed, the function returned `-ENOMEM` while leaving a partially initialized buffer in the list, which could lead to inconsistent state and potential leaks.

By adding the buffer to the list only after `dma_alloc_attrs()` succeeds, we ensure the list contains only valid, fully initialized buffers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 73702f45db81b74897b2808aaa13484826156006 to before 45b30f65feeb4d5570d5337793bb0f298be813d2Affected
  • 73702f45db81b74897b2808aaa13484826156006 to before 98b4c4c90f1e11caecbe2093dbe3a901d338bc81Affected
  • 73702f45db81b74897b2808aaa13484826156006 to before 2d0bbd982dfdd67da488a772f7a8a1bdca7642bfAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.