CVE-2026-97578

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the rockchip vpu981 av1 dec set tile info() function where the system divides context update tile id by tile info->tile cols. Because tile cols and tile rows are derived from the bitstream, a zero value for tile cols could lead to a division by zero. Additionally, the function writes descriptors into the tile info DMA buffer, which has a fixed capacity of AV1 MAX TILES entries, without sufficient bounds checking to prevent buffer overflow when the buffer is full.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.