CVE-2026-43146

media: iris: Add buffer to list only after successful allocation

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: iris: Add buffer to list only after successful allocation

Move `list_add_tail()` to after `dma_alloc_attrs()` succeeds when creating

internal buffers. Previously, the buffer was enqueued in `buffers->list`

before the DMA allocation. If the allocation failed, the function returned

`-ENOMEM` while leaving a partially initialized buffer in the list, which

could lead to inconsistent state and potential leaks.

By adding the buffer to the list only after `dma_alloc_attrs()` succeeds,

we ensure the list contains only valid, fully initialized buffers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-05-06T11:27Z
EPSS history
Timeline
  • 06 MAY 11:27Z
    media: iris: Add buffer to list only after successful allocation
    cvelistv5