Impact
In the Linux kernel media driver vidtv, two inline functions previously copied their input structures by value, which caused Microsoft Sanitizer to report uninitialized‑value warnings. The patch changes the functions to accept const pointers instead, removing the stack copy and its MSAN shadow and origin metadata. The behavior of the driver is unchanged, and the vulnerability does not introduce new execution paths or modify control flow; it primarily impacts development‑time diagnostics and test harnesses rather than runtime security.
Affected Systems
All mainline Linux kernel builds that incorporate the vidtv driver before the inclusion of this patch are affected. The affected code resides in the kernel media subsystem; version information is not specified, so any kernel older than the commit that updates vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() should be identified and updated.
Risk and Exploitability
The CVSS score of 5.5 indicates moderate potential impact on system stability during development, but the EPSS score is less than 1 % and the vulnerability is not listed in CISA KEV, suggesting a very low likelihood of exploitation. It is inferred that the issue is limited to uninitialized memory usage detectable only in environments that employ Microsoft Sanitizer, and would not be exploitable in typical production deployments.
OpenCVE Enrichment