CVE-2026-43235 | Linux Kernel up to 6.18.16/6.19.5 media get_vpu_buffer_size buffer overflow

A vulnerability classified as critical was found in Linux Kernel up to 6.18.16/6.19.5. Affected by this issue is the function get_vpu_buffer_size of the component media. The manipulation results in buffer overflow.

This vulnerability is cataloged as CVE-2026-43235. The attack must originate from the local network. There is no exploit available.

Upgrading the affected component is advised.