CVE-2026-43142 Details
Description
In the Linux kernel, the following vulnerability has been resolved: media: iris: gen1: Destroy internal buffers after FW releases After the firmware releases internal buffers, the driver was not destroying them. This left stale allocations that were no longer used, especially across resolution changes where new buffers are allocated per the updated requirements. As a result, memory was wasted until session close. Destroy internal buffers once the release response is received from the firmware.
A vulnerability exists in the Linux kernel's media iris gen1 driver, where internal buffers are not properly destroyed after being released by the firmware. This oversight leads to stale memory allocations that are no longer in use, particularly during resolution changes that require new buffers. Consequently, memory is wasted until the session is closed. The issue has been addressed by ensuring that internal buffers are destroyed once the release response is received from the firmware.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. The specific commit addressing this issue is 1dabf00ee206eceb0f08a1fe5d1ce635f9064338.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1dabf00ee206eceb0f08a1fe5d1ce635f9064338 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7cde76db8883ec8a3d1456068079ecadbfb15ca5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d4457f23ac0130240053a34be663f0fade3bb371 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.15, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 13, 2026 | Initial Analysis | [email protected] |
| May 6, 2026 | New CVE Received | kernel.org |