CVE-2026-43058

CVEs › CVE-2026-43058

Description

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their argument structs by value, causing MSAN to report uninit-value warnings. While only vidtv_ts_null_write_into() has triggered a report so far, both functions share the same issue. Fix by passing both structs by const pointer instead, avoiding the stack copy of the struct along with its MSAN shadow and origin metadata. The functions do not modify the structs, which is enforced by the const qualifier.

Overview

State: PUBLISHED
Assigner (CNA): Linux
CVSS severity: high
CVSS score: 7.1 / 10
CVSS vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Effective score: 7.1 / 10 HIGH source: CNA overview
MSRC score: 7.1 / 10 HIGH MS rating: Important
CWE(s): —
Reserved: 2026-05-01
Published: 2026-05-02 08:11 UTC
Last updated: 2026-05-12 00:16 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/43xxx/CVE-2026-43058.json
Linked Threat: CVE-2026-43058 — CVE-2026-43058

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-02 07:16:20 UTC
NVD last modified: 2026-05-06 13:08:07 UTC
EPSS score: 0.0003 (probability of exploitation in next 30 days)
EPSS percentile: 9.59% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

NVD / KEV / EPSS data refreshed 2026-05-25 09:10 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-26751
Assigner: Linux
Published: May 2, 2026, 6:11:50 AM
Updated: May 11, 2026, 10:16:53 PM
EUVD base score: 0.0 / 10
EUVD-reported EPSS: 0.0100
Vendors: Linux
Products: Linux (5.10)

Linux (patch: 7.1-rc1)

Linux (patch: 6.6.136)

Linux (patch: 6.19.14)

Linux (f90cf6079bf67988f8b1ad1ade70fc89d0080905 <57b01d945ed68cebe486d495dadc4901a96d3aaa)

Linux (patch: 7.0.1)

Linux (f90cf6079bf67988f8b1ad1ade70fc89d0080905 <6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4)

Linux (f90cf6079bf67988f8b1ad1ade70fc89d0080905 <1b2820c8a9887981634020db19f1a2425558b88e)

Linux (f90cf6079bf67988f8b1ad1ade70fc89d0080905 <e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508)

Linux (patch: 6.18.24)

Linux (patch: 6.12.83)

Linux (patch: 0)

Linux (f90cf6079bf67988f8b1ad1ade70fc89d0080905 <be57e52e27c7cbfb400a8f255e475cbcff242baa)

Linux (f90cf6079bf67988f8b1ad1ade70fc89d0080905 <5f8e73bde67e931468bc2a1860d78d72f0c6ba41)

ENISA description: In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their argument structs by value, causing MSAN to report uninit-value warnings. While only vidtv_ts_null_write_into() has triggered a report so far, both functions share the same issue. Fix by passing both structs by const pointer instead, avoiding the stack copy of the struct along with its MSAN shadow and origin metadata. The functions do not modify the structs, which is enforced by the const qualifier.

EUVD references (6)

Microsoft Security Response Center MSRC

Microsoft's vendor-authoritative record from the Security Update Guide — its own CVSS score, impact, severity rating, exploit assessment, and KB-article fixes. Refreshed 2026-08-15 03:01 UTC (source: CVRF).

MS severity: Important
MS CVSS base score: 7.1 / 10 (temporal 7.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Release: 2026-May

Microsoft remediations / KB articles (2)

CBL-Mariner Releases — Vendor Fix / Security Update (fixed build 6.6.137.1-2)
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade — None Available / CBL-Mariner Releases

Affected products (2)

Vendor	Product	Versions	Platforms
Linux	Linux	`f90cf6079bf67988f8b1ad1ade70fc89d0080905` (affected), `f90cf6079bf67988f8b1ad1ade70fc89d0080905` (affected), `f90cf6079bf67988f8b1ad1ade70fc89d0080905` (affected), `f90cf6079bf67988f8b1ad1ade70fc89d0080905` (affected), `f90cf6079bf67988f8b1ad1ade70fc89d0080905` (affected), `f90cf6079bf67988f8b1ad1ade70fc89d0080905` (affected)	—
Linux	Linux	`5.10` (affected), `0` (unaffected), `6.6.136` (unaffected), `6.12.83` (unaffected), `6.18.24` (unaffected), `6.19.14` (unaffected), `7.0.1` (unaffected), `7.1-rc1` (unaffected)	—

Vendor references (6)

References embedded in the original CVE record by the assigning CNA.

Web references (14)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

None Available msrc
MSRC update guide: CVE-2026-43058 msrc
https://git.kernel.org/stable/c/a73f84a30975e6c4ae06efd500d31c82564dba10 tenable:git.kernel.org
https://git.kernel.org/stable/c/c034d8094fee474eb94142c17643eee2919079b7 tenable:git.kernel.org
https://git.kernel.org/stable/c/a876d72ceba7fe5444005239f363c105767e0ecf tenable:git.kernel.org
https://git.kernel.org/stable/c/e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508 tenable:git.kernel.org
https://nvd.nist.gov/vuln/detail/CVE-2026-43058 tenable:nvd.nist.gov
https://www.cve.org/CVERecord?id=CVE-2026-43058 tenable:www.cve.org
https://git.kernel.org/stable/c/1b2820c8a9887981634020db19f1a2425558b88e tenable:git.kernel.org
https://www.first.org/epss/ tenable:www.first.org
https://git.kernel.org/stable/c/57b01d945ed68cebe486d495dadc4901a96d3aaa tenable:git.kernel.org
https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41 tenable:git.kernel.org
https://git.kernel.org/stable/c/6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4 tenable:git.kernel.org
https://git.kernel.org/stable/c/be57e52e27c7cbfb400a8f255e475cbcff242baa tenable:git.kernel.org

NVD-tagged references (6)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://git.kernel.org/stable/c/1b2820c8a9887981634020db19f1a2425558b88e 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/57b01d945ed68cebe486d495dadc4901a96d3aaa 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/be57e52e27c7cbfb400a8f255e475cbcff242baa 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Remediations (20)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

Virtual Patching - OWASP Cheat Sheet Series

web:cheatsheetseries.owasp.org

Virtual Patching Cheat Sheet Introduction The goal with this cheat Sheet is to present a concise virtual patching framework that organizations can follow to maximize the timely implementation of mitigation protections. Definition: Virtual Patching A security policy enforcement layer which prevents and reports the exploitation attempt of a known vulnerability. The virtual patch works when the ...

2026-05-23 20:23 UTC
How to Fix CVEs | Step-by-Step Vulnerability Management Guide

web:cve.akaoma.com

Learn how to identify, prioritize, and patch CVEs effectively to secure your systems. A detailed step-by-step guide for vulnerability management.

2026-05-23 20:23 UTC
CISA Warns of Exploited Microsoft Defender 0-Day Flaws

web:cyberpress.org

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited Microsoft Defender vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, issuing an urgent remediation directive for federal agencies with a due date of June 3, 2026 .

2026-05-23 20:23 UTC
Patch Management in Database Management - docs.oracle.com

web:docs.oracle.com

Patch Management for Oracle Databases allows you to remediate the vulnerabilities identified through Vulnerability Detection, by using recommended security patches or the CVE ID for your fleet of databases. Using Patch Management, you can: Prioritize critical system remediation based on vulnerability severity, database version, or compliance status, using Gold Image-based out-of-place patching ...

2026-05-23 20:23 UTC
PDF Guide to Enterprise Patch Management Planning: - NIST

web:nvlpubs.nist.gov

The third version, SP 800-40, Revision 3, Guide to Enterprise Patch Management Technologies (2013), was written under the assumption that readers already understood the basics of patch management and that what they most needed help with was implementing, configuring, securing, and using enterprise patch management technologies.

2026-05-23 20:23 UTC
Fortinet Releases Guidance to Address Ongoing Exploitation of ... - CISA

web:www.cisa.gov

CISA urges users to check for indicators of compromise on all internet-accessible Fortinet products affected by this vulnerability and immediately apply updates as soon as they are available using Fortinet's instructions.

2026-05-23 20:23 UTC
Microsoft Rushes Out Emergency Mitigation For 'YellowKey ... - LinkedIn

web:www.linkedin.com

Microsoft Security Response Center has issued an emergency mitigation for a newly disclosed BitLocker bypass vulnerability known as "YellowKey," after security researchers publicly released ...

2026-05-23 20:23 UTC
Microsoft Technical Security Notifications

web:www.microsoft.com

Security Update Guide Notifications Microsoft's free Security Update Guide Notifications provide links to security-related software updates and notification of re-released security updates. These notifications are sent via email throughout the month as needed.

2026-05-23 20:23 UTC
Vulnerability Remediation vs. Mitigation: What are the Differences ...

web:www.secure.com

Learn the difference between vulnerability remediation and mitigation , and how a risk-based strategy can strengthen your security posture.

2026-05-23 20:23 UTC
Strategies for Improving Mitigation & Remediation - Vuln Management ...

web:www.zafran.io

Mitigation is the control implemented or the action taken to reduce the impact or likelihood of a vulnerability or exposure being exploited before a fix is available or applied. Remediation is the resolution of the vulnerability or exposure which is completed typically through applying patches, updates, or correcting misconfigurations.

2026-05-23 20:23 UTC
Microsoft Releases Mitigation for Windows BitLocker Security Bypass 0 ...

web:cybersecuritynews.com

No patch has been released yet; Microsoft has instead issued a multi-step manual mitigation guide while a formal security update is prepared. Windows BitLocker Security Bypass The vulnerability originates in WinRE's handling of the BootExecute registry value under HKLM\ControlSet001\Control\Session Manager.

2026-06-03 07:49 UTC
Security Update Guide - Microsoft

web:msrc.microsoft.com

The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.

2026-06-03 07:49 UTC
NVD - Vulnerabilities

web:nvd.nist.gov

Vulnerabilities All vulnerabilities in the NVD have been assigned a CVE identifier and thus, abide by the definition below. CVE defines a vulnerability as: "A weakness in the computational logic (e.g., code) found in software and hardware components that, when exploited, results in a negative impact to confidentiality, integrity, or availability. Mitigation of the vulnerabilities in this ...

2026-06-03 07:49 UTC
Vulnerability Remediation vs Mitigation: Which Strategy Wins in ...

web:securityboulevard.com

Organizations must decide how to tackle vulnerabilities—through remediation , mitigation , or a combination of both. But which strategy is more effective? This blog explores the nuances of vulnerability remediation vs mitigation , their respective benefits, and how to choose the right approach.

2026-06-03 07:49 UTC
VMware ESXi 8.0 Update 3d Release Notes

web:techdocs.broadcom.com

Patch Category Security Patch Severity Critical Host Reboot Required Yes Virtual Machine Migration or Shutdown Required Yes Affected Hardware N/A Affected Software N/A Affected VIBs Included VMware_bootbank_esxio-update_8..3-.60.24585383 VMware_bootbank_loadesxio_8..3-.60.24585383 PRs Fixed N/A CVE numbers N/A Due to their dependency on the ...

2026-06-03 07:49 UTC
Microsoft provides mitigation for "YellowKey" BitLocker bypass flaw ...

web:www.helpnetsecurity.com

Microsoft is working on a fix for CVE - 2026 -45585 (aka "Yellowkey"), a vulnerability that can be used to bypass Windows' BitLocker protection.

2026-06-03 07:49 UTC
From WinRE to SYSTEM: Hunting CVE-2026-45585 Exploitation and the ...

web:www.levelblue.com

At the time of writing, no patch is available, and no CVE has been assigned. Microsoft has since assigned CVE - 2026 -45585 to this issue and released official mitigation guidance, with a security update pending. The vulnerability is classified as a BitLocker Security Feature Bypass requiring physical access.

2026-06-03 07:49 UTC
Microsoft Defender vulnerabilities are being exploited in the wild

web:www.malwarebytes.com

The KEV catalog tracks vulnerabilities known to be exploited in the wild and sets patch deadlines for Federal Civilian Executive Branch (FCEB) agencies. Five of the added vulnerabilities are quite old by vulnerability standards. Patches were released in 2008, 2009, and 2010. But the Microsoft Defender vulnerabilities are from this year. Those ...

2026-06-03 07:49 UTC
Oracle Critical Patch Update Advisory - April 2026

web:www.oracle.com

This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

2026-06-03 07:49 UTC
VirusTotal - Home

web:www.virustotal.com

VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

2026-06-03 07:49 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-43058.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/test-drivers/vidtv/vidtv_mux.c",
            "drivers/media/test-drivers/vidtv/vidtv_ts.c",
            "drivers/media/test-drivers/vidtv/vidtv_ts.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508",
              "status": "affected",
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "versionType": "git"
            },
            {
              "lessThan": "be57e52e27c7cbfb400a8f255e475cbcff242baa",
              "status": "affected",
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "versionType": "git"
            },
            {
              "lessThan": "6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4",
              "status": "affected",
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "versionType": "git"
            },
            {
              "lessThan": "57b01d945ed68cebe486d495dadc4901a96d3aaa",
              "status": "affected",
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "versionType": "git"
            },
            {
              "lessThan": "1b2820c8a9887981634020db19f1a2425558b88e",
              "status": "affected",
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "versionType": "git"
            },
            {
              "lessThan": "5f8e73bde67e931468bc2a1860d78d72f0c6ba41",
              "status": "affected",
              "version": "f90cf6079bf67988f8b1ad1ade70fc89d0080905",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/test-drivers/vidtv/vidtv_mux.c",
            "drivers/media/test-drivers/vidtv/vidtv_ts.c",
            "drivers/media/test-drivers/vidtv/vidtv_ts.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.10"
            },
            {
              "lessThan": "5.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.136",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.24",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.136",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.83",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.24",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.14",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.1",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1-rc1",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vidtv: fix pass-by-value structs causing MSAN warnings\n\nvidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their\nargument structs by value, causing MSAN to report uninit-value warnings.\nWhile only vidtv_ts_null_write_into() has triggered a report so far,\nboth functions share the same issue.\n\nFix by passing both structs by const pointer instead, avoiding the\nstack copy of the struct along with its MSAN shadow and origin metadata.\nThe functions do not modify the structs, which is enforced by the const\nqualifier."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T22:16:53.951Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508"
        },
        {
          "url": "https://git.kernel.org/stable/c/be57e52e27c7cbfb400a8f255e475cbcff242baa"
        },
        {
          "url": "https://git.kernel.org/stable/c/6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4"
        },
        {
          "url": "https://git.kernel.org/stable/c/57b01d945ed68cebe486d495dadc4901a96d3aaa"
        },
        {
          "url": "https://git.kernel.org/stable/c/1b2820c8a9887981634020db19f1a2425558b88e"
        },
        {
          "url": "https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41"
        }
      ],
      "title": "media: vidtv: fix pass-by-value structs causing MSAN warnings",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43058",
    "datePublished": "2026-05-02T06:11:50.870Z",
    "dateReserved": "2026-05-01T14:12:55.981Z",
    "dateUpdated": "2026-05-11T22:16:53.951Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}