Junglewise Threat Intelligence

CVE-2026-43218: Linux Kernel memory leak in tw9903 video decoder driver

CVE-2026-43218 · Severity: medium · CVSS 5.5 · Published 2026-05-06

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability was identified in the Linux kernel's TW9903 video decoder driver, which is used to support specific video hardware. A flaw in how the driver handles initialization errors can lead to a memory leak. If exploited, this could allow a local user to gradually consume system memory, potentially leading to a system crash or reduced performance.

Technical details

A memory leak exists in the tw9903_probe() function within drivers/media/i2c/tw9903.c of the Linux kernel. The vulnerability occurs because the driver fails to call v4l2_ctrl_handler_free() when an error is encountered during the write_regs() phase of device initialization. This leaves memory allocated by v4l2_ctrl_handler_init() and v4l2_ctrl_new_std() unreferenced but not freed. A local attacker with the ability to trigger device probing or repeated initialization failures could exhaust kernel memory, leading to a denial of service (DoS). The issue has been resolved by adding the missing free call to the error path.

Affected products

  • Linux Linux Kernel 3.10 to 5.10.252, 5.11 to 5.15.202, 5.16 to 6.1.165, 6.2 to 6.6.128, 6.7 to 6.12.75, 6.13 to 6.18.16, 6.19 to 6.19.6

Timeline

  • 2025-12-23: disclosed: Initial patch authored
  • 2026-05-06: advisory: CVE published by kernel.org

References

Related threats