CVE-2026-43256 Details
Description
In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() vfe_isr() iterates using MSM_VFE_IMAGE_MASTERS_NUM(7) as the loop bound and passes the index to vfe_isr_reg_update(). However, vfe->line[] array is defined with VFE_LINE_NUM_MAX(4): struct vfe_line line[VFE_LINE_NUM_MAX]; When index is 4, 5, 6, the access to vfe->line[line_id] exceeds the array bounds and resulting in out-of-bounds memory access. Fix this by using separate loops for output lines and write masters.
A vulnerability allowing out-of-bounds memory access has been identified in the Linux kernel's Qualcomm Camera Subsystem (QCSS) VFE driver, specifically in the VFE 480 hardware version. The issue arises because the VFE ISR (Interrupt Service Routine) function uses an incorrect loop bound, leading to access beyond the allocated array limits for output lines. This flaw can potentially be exploited to cause memory corruption.
Users can upgrade to the patched version of the Linux kernel available in the Linux Kernel Git Repository under the stable branch. The specific commit addressing this vulnerability is 'd965919af524e68cb2ab1a685872050ad2ee933d'.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0c074e80921fd18984b75836730d76c768c84f65 | kernel.org | Patch |
| https://git.kernel.org/stable/c/1b103307df6d461a0731be25aca69ad0335b0933 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d965919af524e68cb2ab1a685872050ad2ee933d | kernel.org | Patch |
| https://git.kernel.org/stable/c/e6cbf765686fb6c1d8f2530b3daf6c66efc92f5d | kernel.org | Patch |
| https://git.kernel.org/stable/c/e7a38ecda2498e7ce998793ac2a46ca47317635d | kernel.org | Patch |
| https://git.kernel.org/stable/c/fade67c88870f497a13ed450ba01f7236c92dd9b | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.18, < 6.1.167 >= 6.2, < 6.6.128 >= 6.7, < 6.12.75 >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 11, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | CVE Modified | kernel.org |
| May 6, 2026 | New CVE Received | kernel.org |