CVE-2026-93236

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the vdec try fmt common() function when VIDIOC TRY FMT is called with an unsupported pixel format on the OUTPUT queue. The system attempts to fall back to V4L2 PIX FMT MPEG2, but if MPEG2 support has been removed from the platform format table, the find format() function returns NULL. This leads to a crash when the system attempts to dereference fmt out->max width.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.