CVE-2026-97576

The Linux kernel contains a vulnerability in the media subsystem where stateless HEVC decoders fail to properly bound u8 counts for tile-loop bounds. Specifically, the std_validate_compound() function does not validate that num_tile_columns_minus1 and num_tile_rows_minus1 entries remain within th...

CVE-2026-97575

The Linux kernel contains a vulnerability in the media: v4l2-ctrls component where stateless AV1 decoders fail to bound tile_info.tile_cols and tile_info.tile_rows fields during validation via std_validate_compound(). These fields are used as loop bounds, array indices, and divisors, which can le...

DEBIAN-CVE-2026-89873

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC...

CVE-2026-89873

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC...

EUVD-2026-80473

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC...

CVE-2026-89873 media: v4l2-ctrls: validate HEVC EXT SPS RPS counts

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC...

CVE-2026-89873

CVE-2026-89873 affects the Linux kernel 's media: v4l2-ctrls subsystem, which handles HEVC video decoding controls. The vulnerability is a missing input validation on the HEVC Sequence Parameter Set (SPS) Reference Picture Set (RPS) counts. Specifically, SPS values exceeding the HEVC limits of 64...

CVE-2026-89873 media: v4l2-ctrls: validate HEVC EXT SPS RPS counts

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC...

CVE-2026-89873: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC...

Linux Distros Unpatched Vulnerability : CVE-2026-89873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long- term RPS counts that decoder drivers use to walk the...

UBUNTU-CVE-2026-68206

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...

CVE-2026-68206 media: v4l2-ctrls: validate HEVC active reference counts

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...

CVE-2026-68206: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...