Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix resource leaks in vdecmsgqueueinit If any error occurs in vdecmsgqueueinit, we need to set msgqueue-wdmaaddr.size = 0;. Normally, this is done inside the vdecmsgqueuedeinit function. However, if the...

SUSE CVE-2026-97579

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...

DEBIAN-CVE-2026-97579

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...

CVE-2026-97579 media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...

CVE-2026-97579

The Linux kernel contains a vulnerability in the mediatek vcodec component. Specifically, the function vdec_av1_slice_setup_tile() fails to validate that the number of entries copied from the bitstream tile_info (calculated as tile_cols + 1 and tile_rows + 1) does not exceed the capacity of the m...

CVE-2026-97579 media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...

CVE-2026-97579

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...

EUVD-2026-86887

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...

CVE-2026-97579: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...

PT-2026-98519

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mediatek vcodec component where the vdec av1 slice setup tile function copies tile cols + 1 and tile rows + 1 entries from the bitstream tile info into the mi col...

Linux Distros Unpatched Vulnerability : CVE-2026-97579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts /...

The vulnerability of the fops_vcodec_release() function in the driver/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c file of the Linux kernel’s multimedia device drivers allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the fopsvcodecrelease function in the drivers/media/platform/mediatek/vcodec/encoder/mtkvcodecencdrv.c driver for multimedia devices in Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker...

The vulnerability of the mtk_vcodec_dec_remove() function in the drivers/media/platform/mediatek/vcodec/mtk_vcodec_dec_drv.c driver, which supports multimedia devices in the Linux operating system. This vulnerability allows a hacker to cause a service failure.

The vulnerability of the mtkvcodecdecremove function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecdrv.c driver code relates to the improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mtk_vcodec_probe() function in the driver/media/platform/mediatek/vcodec/mtk_vcodec_dec_drv.c file of the Linux operating system’s multimedia device drivers allows a hacker to cause a service failure.

The vulnerability of the mtkvcodecprobe function in the drivers/media/platform/mediatek/vcodec/mtkvcodecdecdrv.c driver for multimedia devices in Linux operating systems is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause service...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: The use of a spinlock for the context list protection lock was corrected. Previously, a mutex was added to protect the encoder and decoder context lists from unexpected changes originating from the SCP IP...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Added a lock to protect the encoder context list. A lock was added for the ctxlist to prevent accessing a NULL pointer within the 'vpuencipihandler' function when the ctxlist is deleted due to an unexpect...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Media: MediTech: vcodec: Fixed an oops when HEVC initialization fails. The stateless HEVC decoder saves the instance pointer in the context, regardless of whether the initialization succeeded or not. This caused a use-after-fr...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: media: mediatek: vcodec: fix decoder disable pm crash It is not possible to call pmruntimedisable when the architecture supports a sub-device for “dev-pm.dev” is NUll, or it may result in a crash log. 10.771551 pc :...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - Media: MediTech: vcodec: Added a lock to protect the ctxlist variable, to prevent access to a NULL pointer within the vpudecipihandler function when the ctxlist has been deleted due to an unexpected behavior on the SCP IP...

Linux Distros Unpatched Vulnerability : CVE-2026-31584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: mediatek: vcodec: fix use-after-free in encoder release path The fopsvcodecrelease function frees the context structure ctx without first cancelling any...