CVE-2026-43162: media: tegra-video: Fix memory leak in __tegra_channel_try_format()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-06 · updated 2026-06-17
Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: media: tegra-video: Fix memory leak in __tegra_channel_try_format() The state object allocated by __v4l2_subdev_state_alloc() must be freed with __v4l2_subdev_state_free() when it is no longer needed. In __tegra_channel_try_format(), two error paths return directly after v4l2_subdev_call() fails, without freeing the allocated 'sd_state' object. This violates the requirement and causes a memory leak. Fix this by introducing a cleanup label and using goto statements in the error paths to ensure that __v4l2_subdev_state_free() is always called before the function returns.

Affected products

Linux kernel: from 5.10 before 6.1.167; from 6.2 before 6.6.130; from 6.7 before 6.12.77; from 6.13 before 6.18.17; from 6.19 before 6.19.6 — fixed in 6.1.167, 6.12.77, 6.18.17, 6.19.6, 6.6.130

How to fix

Upgrade to a fixed version: Linux kernel 6.1.167, 6.12.77, 6.18.17, 6.19.6. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-43162 or the next vulnerability affects your stack