41 matches found
Astra Linux – vulnerability in linux-5.10, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this allocation fails, the function returns -ENOMEM without freeing the...
CVE-2026-89896
A flaw was found in the Linux kernel's Cedrus media driver. The cedrusinitctrls function, responsible for initializing V4L2 Video for Linux Two control handlers, does not properly free allocated resources if a subsequent memory allocation fails. This oversight can lead to a memory leak, potential...
SUSE CVE-2026-89896
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this allocation fails, the function returns -ENOMEM without freeing the...
EUVD-2026-80496
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this allocation fails, the function returns -ENOMEM without freeing the...
CVE-2026-89896
This Linux kernel memory leak affects the cedrus media driver (Allwinner SoC VPU). In cedrus_init_ctrls() , the V4L2 control handler is initialized before allocating memory for ctx->ctrls; if that allocation fails, the function returns -ENOMEM without freeing the handler resources, causing a l...
CVE-2026-89896 media: cedrus: fix memory leak in cedrus_init_ctrls()
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this allocation fails, the function returns -ENOMEM without freeing the...
PT-2026-93537
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1.2 Description A memory leak exists in the cedrus init ctrls function. The V4L2 control handler is initialized before memory is allocated for ctx-ctrls. If the memory allocation for ctx-ctrls fails, the functi...
CVE-2026-89896: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: fix memory leak in cedrusinitctrls In cedrusinitctrls, the V4L2 control handler is initialized before allocating memory for ctx-ctrls. If this allocation fails, the function returns -ENOMEM without freeing the...
Malicious code in cedrus-example-loader (npm)
The package cedrus-example-loader was found to contain malicious code. --- Credit: OpenSSF source...
SUSE CVE-2026-68229
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
CVE-2026-68229
A flaw was found in the Linux kernel's Cedrus media driver. This vulnerability allows an attacker to cause an out-of-bounds read by providing specially crafted H.264 video streams with invalid reference list entries. This could lead to system instability or potentially information disclosure...
media: cedrus: skip invalid H.264 reference list entries
...
CVE-2026-68229
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
CVE-2026-68206
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...
UBUNTU-CVE-2026-68229
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
CVE-2026-68229
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
CVE-2026-68229 media: cedrus: skip invalid H.264 reference list entries
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
CVE-2026-68229 media: cedrus: skip invalid H.264 reference list entries
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...
CVE-2026-68229
Summary of CVE-2026-68229 : In the Linux kernel, the Cedrus media driver is vulnerable to an out-of-bounds read caused by invalid H.264 reference list entries. The driver previously used indices from stateless reference lists to access decode->dpb[] in _cedrus_write_ref_list(), which could rea...
EUVD-2026-55330
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses their indices to look up decode-dpb in cedruswritereflist. Rejecting...