CVE-2026-89896

A flaw was found in the Linux kernel's Cedrus media driver. The cedrusinitctrls function, responsible for initializing V4L2 Video for Linux Two control handlers, does not properly free allocated resources if a subsequent memory allocation fails. This oversight can lead to a memory leak, potential...

SUSE CVE-2026-89896

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this allocation fails, the function returns -ENOMEM without freeing the...

EUVD-2026-80496

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this allocation fails, the function returns -ENOMEM without freeing the...

CVE-2026-89896

This Linux kernel memory leak affects the cedrus media driver (Allwinner SoC VPU). In cedrus_init_ctrls() , the V4L2 control handler is initialized before allocating memory for ctx->ctrls; if that allocation fails, the function returns -ENOMEM without freeing the handler resources, causing a l...

CVE-2026-89896 media: cedrus: fix memory leak in cedrus_init_ctrls()

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this allocation fails, the function returns -ENOMEM without freeing the...

CVE-2026-89896: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this allocation fails, the function returns -ENOMEM without freeing the...

PT-2026-93537

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1.2 Description A memory leak exists in the cedrus init ctrls function. The V4L2 control handler is initialized before memory is allocated for ctx-ctrls. If the memory allocation for ctx-ctrls fails, the functi...

SUSE CVE-2026-68229

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...

CVE-2026-68229

A flaw was found in the Linux kernel's Cedrus media driver. This vulnerability allows an attacker to cause an out-of-bounds read by providing specially crafted H.264 video streams with invalid reference list entries. This could lead to system instability or potentially information disclosure...

media: cedrus: skip invalid H.264 reference list entries

...

CVE-2026-68229

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...

CVE-2026-68229

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...

UBUNTU-CVE-2026-68229

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...

CVE-2026-68206

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...

CVE-2026-68229 media: cedrus: skip invalid H.264 reference list entries

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...

CVE-2026-68229

Summary of CVE-2026-68229 : In the Linux kernel, the Cedrus media driver is vulnerable to an out-of-bounds read caused by invalid H.264 reference list entries. The driver previously used indices from stateless reference lists to access decode->dpb[] in _cedrus_write_ref_list(), which could rea...

CVE-2026-68229 media: cedrus: skip invalid H.264 reference list entries

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...

EUVD-2026-55330

In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...

Linux Distros Unpatched Vulnerability : CVE-2026-68229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses...

PT-2026-69629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Cedrus driver where it processes H.264 ref pic list0 and ref pic list1 entries from stateless slice control. The driver uses these indices to perform lookups in th...