CVE-2026-43235

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-43235
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43235.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-43235
Downstream
Published
2026-05-06T11:28:30.872Z
Modified
2026-07-08T08:09:35.541675677Z
Summary
media: iris: Add missing platform data entries for SM8750
Details

In the Linux kernel, the following vulnerability has been resolved:

media: iris: Add missing platform data entries for SM8750

Two platform-data fields for SM8750 were missed:

  • getvpubuffersize = irisvpu33bufsize Without this, the driver fails to allocate the required internal buffers, leading to basic decode/encode failures during session bring-up.

  • maxcorembps = ((7680 * 4320) / 256) * 60 Without this capability exposed, capability checks are incomplete and v4l2-compliance for encoder fails.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43235.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a6882431a138ac352a6e20ec3b85f97f84501329
Fixed
1aa5833f29b88c16e9ad49a1782927754f3af742
Fixed
c7b2105a1cad1737eb877cdb4865618927623dd4
Fixed
bbef55f414100853d5bcea56a41f8b171bac8fcb

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43235.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.17
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43235.json"