CVE-2026-43058

Vulnerability

Analysis In the Linux kernel's media subsystem, the vidtv driver contains functions vidtv_ts_null_write_into and vidtv_ts_pcr_write_into that take struct arguments by value. This causes MSAN (Memory Sanitizer) to report uninitialized value warnings because the stack copy includes shadow and origin metadata that may not be fully initialized [1].

Exploitation and

Attack Surface This issue is a code quality problem rather than a directly exploitable vulnerability; it results in false positive reports from MSAN. The functions do not modify the structs, so passing them by const pointer avoids unnecessary stack copies and eliminates the spurious warnings [1].

Impact and

Mitigation Although no runtime security impact has been demonstrated, the MSAN warnings could mask genuine uninitialized memory issues during testing. The kernel community fixed the issue by changing both functions to accept const pointers instead of pass-by-value, backported to multiple stable kernel branches [1][2][3][4].