CVE-2026-97576

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Stateless HEVC decoders read entries from column width minus1[] and row height minus1[] based on the values of num tile columns minus1 + 1 and num tile rows minus1 + 1, using them as tile-loop bounds. However, the std validate compound() function fails to bound these u8 counts. This allows a V4L2 CTRL TYPE HEVC PPS with tiling enabled to exceed the uAPI array capacity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.