CVE-2026-68229

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Cedrus driver where it processes H.264 ref pic list0 and ref pic list1 entries from stateless slice control. The driver uses these indices to perform lookups in the decode->dpb[] array within the cedrus write ref list() function. If the reference list entries are malformed or unsupported and contain indices that exceed the V4L2 H264 NUM DPB ENTRIES array size, it can lead to out-of-bounds reads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.