SB2026050205 - Use of Uninitialized Variable in Linux kernel test-drivers vidtv driver
Published: May 2, 2026
Security Bulletin ID
SB2026050205
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Use of Uninitialized Variable (CVE-ID: CVE-2026-43058)
CWE-ID: CWE-457 - Use of Uninitialized Variable
CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a local user to disclose sensitive information.
The vulnerability exists due to use of uninitialized memory in vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() when processing struct arguments passed by value. A local user can trigger the affected code path to disclose sensitive information.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1b2820c8a9887981634020db19f1a2425558b88e
- https://git.kernel.org/stable/c/57b01d945ed68cebe486d495dadc4901a96d3aaa
- https://git.kernel.org/stable/c/5f8e73bde67e931468bc2a1860d78d72f0c6ba41
- https://git.kernel.org/stable/c/6d75a9ec5bdb8cf8382eaf8f8fe831ba7d58a9d4
- https://git.kernel.org/stable/c/be57e52e27c7cbfb400a8f255e475cbcff242baa
- https://git.kernel.org/stable/c/e3957eb26a3d570aefc6bb184fa8b8a1e9a4e508