CVE-2026-59618 · Infrastructure
NO FIX YET
A flaw in the smfc V4L2 selection ioctl handler lets a local process trigger an out-of-bounds read caused by an integer overflow. An attacker with local access can read adjacent shared memory buffers, which discloses information without needing extra privileges.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only systems where the smfc V4L2 driver is loaded can be exposed, and the attacker needs local code execution on that machine. The sources do not name affected kernel versions or whether the driver is built in by default, so unknown. Teams running standard servers without this video capture hardware can likely skip it.
Not affected if driver-not-loaded, no-local-untrusted-users
Who cares linux-kernel, local-users, v4l2
Unknown from the sources.
No fix yet, per the sources.
In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.