Description
In the Linux kernel, the following vulnerability has been resolved:

media: vidtv: fix pass-by-value structs causing MSAN warnings

vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their
argument structs by value, causing MSAN to report uninit-value warnings.
While only vidtv_ts_null_write_into() has triggered a report so far,
both functions share the same issue.

Fix by passing both structs by const pointer instead, avoiding the
stack copy of the struct along with its MSAN shadow and origin metadata.
The functions do not modify the structs, which is enforced by the const
qualifier.
Published: 2026-05-02
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

In the Linux kernel media driver vidtv, two inline functions previously copied their input structures by value, which caused Microsoft Sanitizer to report uninitialized‑value warnings. The patch changes the functions to accept const pointers instead, removing the stack copy and its MSAN shadow and origin metadata. The behavior of the driver is unchanged, and the vulnerability does not introduce new execution paths or modify control flow; it primarily impacts development‑time diagnostics and test harnesses rather than runtime security.

Affected Systems

All mainline Linux kernel builds that incorporate the vidtv driver before the inclusion of this patch are affected. The affected code resides in the kernel media subsystem; version information is not specified, so any kernel older than the commit that updates vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() should be identified and updated.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate potential impact on system stability during development, but the EPSS score is less than 1 % and the vulnerability is not listed in CISA KEV, suggesting a very low likelihood of exploitation. It is inferred that the issue is limited to uninitialized memory usage detectable only in environments that employ Microsoft Sanitizer, and would not be exploitable in typical production deployments.

Generated by OpenCVE AI on May 26, 2026 at 15:55 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to a Linux kernel release that includes the vidtv driver fix, which changes struct passing to const pointers.
  • If using a custom bootable image or a distribution that lags, rebuild the media driver modules from source that incorporates the commit.
  • For environments where MSAN is employed during testing, filter or ignore the uninitialized‑value reports that originated from these functions until the kernel provides the official patch.

Generated by OpenCVE AI on May 26, 2026 at 15:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 01 Jun 2026 17:00:00 +0000


Tue, 26 May 2026 13:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}


Mon, 04 May 2026 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-457

Mon, 04 May 2026 12:15:00 +0000


Sat, 02 May 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-457

Sat, 02 May 2026 06:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their argument structs by value, causing MSAN to report uninit-value warnings. While only vidtv_ts_null_write_into() has triggered a report so far, both functions share the same issue. Fix by passing both structs by const pointer instead, avoiding the stack copy of the struct along with its MSAN shadow and origin metadata. The functions do not modify the structs, which is enforced by the const qualifier.
Title media: vidtv: fix pass-by-value structs causing MSAN warnings
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-06-14T17:44:43.464Z

Reserved: 2026-05-01T14:12:55.981Z

Link: CVE-2026-43058

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2026-05-02T07:16:20.830

Modified: 2026-06-01T17:17:01.063

Link: CVE-2026-43058

cve-icon Redhat

Severity :

Publid Date: 2026-05-02T00:00:00Z

Links: CVE-2026-43058 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-05-26T16:00:11Z

Weaknesses
  • CWE-476

    NULL Pointer Dereference

  • CWE-824

    Access of Uninitialized Pointer