CVE-2026-97578
Last modified
CVE-2026-97578 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer rockchip_vpu981_av1_dec_set_tile_info() divides context_update_tile_id by tile_info->tile_cols and writes one descriptor per tile into the tile_info DMA buffer, which holds AV1_MAX_TILES entries; tile_cols and tile_rows come from the bitstream. Guard the division against a zero tile_cols by initialising the context-update values to zero and computing them only when tile_cols is non-zero, and stop the descriptor writes once the tile_info buffer is full.
Description
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer rockchip_vpu981_av1_dec_set_tile_info() divides context_update_tile_id by tile_info->tile_cols and writes one descriptor per tile into the tile_info DMA buffer, which holds AV1_MAX_TILES entries; tile_cols and tile_rows come from the bitstream. Guard the division against a zero tile_cols by initialising the context-update values to zero and computing them only when tile_cols is non-zero, and stop the descriptor writes once the tile_info buffer is full. The tile geometry written to the hardware registers is left unmodified; the per-dimension and total tile bounds are enforced by the control validation.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 727a400686a2c0d25015c9e44916a59b72882f83, < 7baa7bb1b784c19170df8c99466fa412040eb431; >= 727a400686a2c0d25015c9e44916a59b72882f83, < 8f19d869a9f6800547c9ad7ebaf3b94f973dab50; >= 727a400686a2c0d25015c9e44916a59b72882f83, < 6b7a281a815ae7c5e7bb2aad039ffea9bc933157; >= 727a400686a2c0d25015c9e44916a59b72882f83, < b84f6533a8ed2fd7b282fc7ab4b8efadc745a89c |
| Linux | Linux | 6.5 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-97578?
How severe is CVE-2026-97578?
How do I fix CVE-2026-97578?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-97572In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97573In the Linux kernel, the following vulnerability has been re…8.1
- CVE-2026-97574In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97575In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-97576In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-97577In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-97579In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-9758Improper comparison with the certificates trusted list in S2…7.3
- CVE-2026-97580In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-97581In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97582In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97583In the Linux kernel, the following vulnerability has been re…7.5
Are you affected by CVE-2026-97578?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST