CVE-2026-68206

The CVE concerns the Linux kernel media stack (v4l2-ctrls) where HEVC slice parameters are exposed as stateless V4L2 controls. Root cause: the common HEVC slice control validation did not verify the active L0/L1 reference counts before driver-specific code consumed them, potentially allowing out-...