Medium 5.5Published May 8, 2026

CVE-2026-43297media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()

Updated under an hour ago (Oct 28, 2026, 4:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init() rga_get_frame() can return ERR_PTR(-EINVAL) when buffer type is unsupported or invalid. rga_buf_init() does not check the return value and unconditionally dereferences the pointer when accessing f->size. Add proper ERR_PTR checking and return the error to prevent dereferencing an invalid pointer.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	6040702ade234c8212dcfdef85e2f5549aa2f0f5 builds before 5da29ade540b51763b950987bd410add7edaf3d1; 6040702ade234c8212dcfdef85e2f5549aa2f0f5 builds before 1af2853b4e97fd95262fdef311b2334337069bc9; from 6040702ade234c8212dcfdef85e2f5549aa2f0f5 before aa22221c5dc695a3d479e1e1b63f0c0e9eb29dbf; 6040702ade234c8212dcfdef85e2f5549aa2f0f5 builds before 81f8e0e6a2e115df9274d0289779f8fca694479c	CNA record
linux linux_kernel linux:linux_kernel	from 6.8 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/5da29ade540b51763b950987bd410add7edaf3d1	patch
https://git.kernel.org/stable/c/1af2853b4e97fd95262fdef311b2334337069bc9	patch
https://git.kernel.org/stable/c/aa22221c5dc695a3d479e1e1b63f0c0e9eb29dbf	patch
https://git.kernel.org/stable/c/81f8e0e6a2e115df9274d0289779f8fca694479c	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.