{"id":"CVE-2026-43162","summary":"media: tegra-video: Fix memory leak in __tegra_channel_try_format()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: tegra-video: Fix memory leak in __tegra_channel_try_format()\n\nThe state object allocated by __v4l2_subdev_state_alloc() must be freed\nwith __v4l2_subdev_state_free() when it is no longer needed.\n\nIn __tegra_channel_try_format(), two error paths return directly after\nv4l2_subdev_call() fails, without freeing the allocated 'sd_state'\nobject. This violates the requirement and causes a memory leak.\n\nFix this by introducing a cleanup label and using goto statements in the\nerror paths to ensure that __v4l2_subdev_state_free() is always called\nbefore the function returns.","modified":"2026-07-21T09:52:43.911167543Z","published":"2026-05-06T11:27:40.580Z","related":["SUSE-SU-2026:3130-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43162.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/2dff8966a3a889dd9d248a7e15d963b4097efcc5"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3ca2f09061736e72ef25eec2597d00f7f44094d3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/43e5302d22334f1183dec3e0d5d8007eefe2817c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6c6f419fa9c44a4b7149b0292e01bff47308ba14"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ca921be7a1174d5d58b28f84b683c2c0079f18c5"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d92e9a18f97a1d19d4c2ff81dcfbe43591f75b5a"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43162.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43162"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"1ebaeb09830f36c1111b72a95420814225bd761c"},{"fixed":"6c6f419fa9c44a4b7149b0292e01bff47308ba14"},{"fixed":"ca921be7a1174d5d58b28f84b683c2c0079f18c5"},{"fixed":"3ca2f09061736e72ef25eec2597d00f7f44094d3"},{"fixed":"2dff8966a3a889dd9d248a7e15d963b4097efcc5"},{"fixed":"d92e9a18f97a1d19d4c2ff81dcfbe43591f75b5a"},{"fixed":"43e5302d22334f1183dec3e0d5d8007eefe2817c"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43162.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.10.0"},{"fixed":"6.1.167"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.130"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.77"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.17"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"6.19.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43162.json"}}],"schema_version":"1.7.5"}