CVE-2026-97576
Last modified
CVE-2026-97576 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC tile counts The stateless HEVC decoders read num_tile_columns_minus1 + 1 entries from column_width_minus1[] and num_tile_rows_minus1 + 1 from row_height_minus1[] and use them as tile-loop bounds, but std_validate_compound() does not bound these u8 counts. Reject a V4L2_CTRL_TYPE_HEVC_PPS with tiling enabled whose tile counts exceed the uAPI array capacity, mirroring the existing compound-control range checks.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC tile counts The stateless HEVC decoders read num_tile_columns_minus1 + 1 entries from column_width_minus1[] and num_tile_rows_minus1 + 1 from row_height_minus1[] and use them as tile-loop bounds, but std_validate_compound() does not bound these u8 counts. Reject a V4L2_CTRL_TYPE_HEVC_PPS with tiling enabled whose tile counts exceed the uAPI array capacity, mirroring the existing compound-control range checks.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 256fa3920874b0f1f4cb79ad6766493a22187153, < 9c0a718e24d4cd6d975f3df9740f968f62891a20; >= 256fa3920874b0f1f4cb79ad6766493a22187153, < 975e0180488966bb709092a52408604bd4f4edd9; >= 256fa3920874b0f1f4cb79ad6766493a22187153, < 724915535558b14c111ad8a498b896026dfe8d20; >= 256fa3920874b0f1f4cb79ad6766493a22187153, < 400cd78a63cc647412cf069c9851bdea2818340c; >= 256fa3920874b0f1f4cb79ad6766493a22187153, < c7b1ef6dc57f4e57fe27cfdd3bf82033ed91ca34; >= 256fa3920874b0f1f4cb79ad6766493a22187153, < ba1023d3a6d5d244d59f20c4ba6af4879ae08a9f; >= 256fa3920874b0f1f4cb79ad6766493a22187153, < dc694a9929f7cb9c88ef91e45eb982b7bbe5a477 |
| Linux | Linux | 5.5 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-97576?
How severe is CVE-2026-97576?
How do I fix CVE-2026-97576?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-97570In the Linux kernel, the following vulnerability has been re…8.1
- CVE-2026-97571In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97572In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97573In the Linux kernel, the following vulnerability has been re…8.1
- CVE-2026-97574In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97575In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-97577In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-97578In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-97579In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-9758Improper comparison with the certificates trusted list in S2…7.3
- CVE-2026-97580In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-97581In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-97576?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST