CVE-2026-43310

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-43310
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43310.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-43310
Downstream
BELL (1)
CGA (80)
DEBIAN (1)
ROOT (4)
UBUNTU (1)
Published
2026-05-08T13:11:28Z
Modified
2026-11-01T02:30:42Z
Summary
media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC
Details

In the Linux kernel, the following vulnerability has been resolved:

media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC

For the i.MX8MQ platform, there is a hardware limitation: the g1 VPU and g2 VPU cannot decode simultaneously; otherwise, it will cause below bus error and produce corrupted pictures, even potentially lead to system hang.

[ 110.527986] hantro-vpu 38310000.video-codec: frame decode timed out. [ 110.583517] hantro-vpu 38310000.video-codec: bus error detected.

Therefore, it is necessary to ensure that g1 and g2 operate alternately. This allows for successful multi-instance decoding of H.264 and HEVC.

To achieve this, g1 and g2 share the same v4l2_m2m_dev, and then the v4l2_m2m_dev can handle the scheduling.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43310.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c
Fixed
42a9fbccb33a38c5a9e0a84680939da8eae4f60e
Fixed
f988fbf0536b42f6a05ccc1ac709d60236ec1aa6
Fixed
f2efc1e8ab65bdb9b892af132887323e4df92f02
Fixed
5133ef7c893c2c3aee7dd12503dc480de9dbfbb5
Fixed
286d629d10640bc22f3bf46aa4f356eb7975e862
Fixed
e0203ddf9af7c8e170e1e99ce83b4dc07f0cd765

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43310.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.14.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43310.json"