CVE-2026-97581
Last modified
CVE-2026-97581 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity prepare_tile_info_buffer() writes one entry per tile into the tile_sizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded v4l2_hevc_pps_num_tile_columns() / v4l2_hevc_pps_num_tile_rows() helpers so the loops stay inside the buffer..
Description
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity prepare_tile_info_buffer() writes one entry per tile into the tile_sizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded v4l2_hevc_pps_num_tile_columns() / v4l2_hevc_pps_num_tile_rows() helpers so the loops stay inside the buffer.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c, < 62ae24639d22909a5724627a0467e4bde9704020; >= cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c, < 4f654c9bc954569ff9b8ab860b29480c4cf6f57b; >= cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c, < 05e8e4cdfe692f5cedba9aa9d7b8f2584cf926c8; >= cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c, < 06236b094c899c22c12ac5097935eb6719293de8 |
| Linux | Linux | 5.14 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-97581?
How severe is CVE-2026-97581?
How do I fix CVE-2026-97581?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-97576In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97577In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97578In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97579In the Linux kernel, the following vulnerability has been re…
- CVE-2026-9758Improper comparison with the certificates trusted list in S2…7.3
- CVE-2026-97580In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97582In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97583In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97584In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97585In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97586In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97587In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-97581?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST