---
id: "CVE-2026-59618"
page: "https://infrastack.ai/live/CVE-2026-59618"
kind: "vulnerability"
aliases: ["CVE-2026-59618"]
title: "Linux kernel: integer overflow in V4L2 selection code leaks adjacent memory"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "linux-kernel", "local-users", "v4l2"]
not_affected_if: ["driver-not-loaded", "no-local-untrusted-users"]
published_at: "2026-11-10T20:19:31+00:00"
first_seen_at: "2026-11-10T20:46:14+00:00"
updated_at: "2026-11-10T20:49:38+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59618", "first_seen_at": "2026-11-10T20:46:14+00:00"}]
exploit_sources: []
---

# Linux kernel: integer overflow in V4L2 selection code leaks adjacent memory

Link for people: https://infrastack.ai/live/CVE-2026-59618 (this .md is for agents)

A flaw in the smfc V4L2 selection ioctl handler lets a local process trigger an out-of-bounds read caused by an integer overflow. An attacker with local access can read adjacent shared memory buffers, which discloses information without needing extra privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T20:46:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-59618

## From the sources

In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_