CVE-2026-43162 Details

A memory leak vulnerability has been identified in the Linux kernel's Tegra video driver. The issue arises in the '__tegra_channel_try_format()' function, where the state object allocated by '__v4l2_subdev_state_alloc()' is not properly freed before the function returns. This oversight creates a memory leak, as two error paths fail to release the allocated 'sd_state' object after a 'v4l2_subdev_call()' failure. The vulnerability affects the Linux kernel stable tree.

The vulnerability has been addressed by modifying the '__tegra_channel_try_format()' function to include a cleanup label. This change ensures that the '__v4l2_subdev_state_free()' function is called to free the 'sd_state' object before the function exits, effectively preventing the memory leak.