In the Linux kernel, the following vulnerability has been resolved:
media: iris: Add buffer to list only after successful allocation
Move `list_add_tail()` to after `dma_alloc_attrs()` succeeds when creating
internal buffers. Previously, the buffer was enqueued in `buffers->list`
before the DMA allocation. If the allocation failed, the function returned
`-ENOMEM` while leaving a partially initialized buffer in the list, which
could lead to inconsistent state and potential leaks.
By adding the buffer to the list only after `dma_alloc_attrs()` succeeds,
we ensure the list contains only valid, fully initialized buffers.
References
Configurations
Configuration 1 (hide)
|
History
13 May 2026, 20:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/2d0bbd982dfdd67da488a772f7a8a1bdca7642bf - Patch | |
| References | () https://git.kernel.org/stable/c/45b30f65feeb4d5570d5337793bb0f298be813d2 - Patch | |
| References | () https://git.kernel.org/stable/c/98b4c4c90f1e11caecbe2093dbe3a901d338bc81 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| First Time |
Linux linux Kernel
Linux |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | NVD-CWE-noinfo |
06 May 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-06 12:16
Updated : 2026-05-13 20:19
NVD link : CVE-2026-43146
Mitre link : CVE-2026-43146
CVE.ORG link : CVE-2026-43146
JSON object : View
Products Affected
linux
- linux_kernel
CWE