CVE-2026-97581

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the prepare tile info buffer() function where it writes one entry per tile into the tile sizes DMA buffer. This buffer is sized for a grid equal to the PPS uAPI array capacity, which can lead to out-of-bounds writes if the loops are not properly bounded. To prevent this, the v4l2 hevc pps num tile columns() and v4l2 hevc pps num tile rows() helper functions should be used to ensure loops remain within the buffer capacity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.