CVE-2026-89873

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the v4l2-ctrls component where HEVC SPS (Sequence Parameter Set) controls do not properly validate short-term and long-term RPS (Reference Picture Set) counts. This allows SPS values to exceed the HEVC limits of 64 short-term sets and 32 long-term references, potentially leading to out-of-bounds indexing by decoder drivers. Additionally, the system fails to reject EXT SPS ST RPS entries with negative or positive picture counts exceeding 16-entry arrays or combined delta-POC (Picture Order Count) counts exceeding the HEVC DPB (Decoded Picture Buffer) maximum.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.