AZL-104826 CVE-2026-97581 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...

DEBIAN-CVE-2026-97581

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...

CVE-2026-97578

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer rockchipvpu981av1decsettileinfo divides contextupdatetileid by tileinfo-tilecols and writes one descriptor per tile into the tileinfo DMA buffer, which holds...

CVE-2026-97581

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...

CVE-2026-97577

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...

CVE-2026-97581 media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...

CVE-2026-97581

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...

EUVD-2026-86889

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...

CVE-2026-97581 media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...

CVE-2026-97581

The Linux kernel contains a vulnerability in the verisilicon hantro media driver. The prepare_tile_info_buffer() function fails to properly bound loops when writing entries into the tile_sizes DMA buffer , which is sized based on the PPS uAPI array capacity . This lack of bounds checking can lead...

EUVD-2026-86886

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer rockchipvpu981av1decsettileinfo divides contextupdatetileid by tileinfo-tilecols and writes one descriptor per tile into the tileinfo DMA buffer, which holds...

CVE-2026-97578 media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer rockchipvpu981av1decsettileinfo divides contextupdatetileid by tileinfo-tilecols and writes one descriptor per tile into the tileinfo DMA buffer, which holds...

CVE-2026-97578

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer rockchipvpu981av1decsettileinfo divides contextupdatetileid by tileinfo-tilecols and writes one descriptor per tile into the tileinfo DMA buffer, which holds...

CVE-2026-97578 media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer rockchipvpu981av1decsettileinfo divides contextupdatetileid by tileinfo-tilecols and writes one descriptor per tile into the tileinfo DMA buffer, which holds...

CVE-2026-97577 media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...

CVE-2026-97577

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...

CVE-2026-97577

The Linux kernel contains a vulnerability in the rockchip AV1 decoder driver. Specifically, the function rockchip_vpu981_av1_dec_set_tile_info() fails to properly validate the number of tiles in an AV1 frame against the submitted entry count and the maximum capacity of the AV1_MAX_TILES buffer. T...

CVE-2026-97577 media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...

Linux Distros Unpatched Vulnerability : CVE-2026-97581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized...

CVE-2026-97581

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...