CVE-2026-97581media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity prepare_tile_info_buffer() writes one entry per tile into the tile_sizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded v4l2_hevc_pps_num_tile_columns() / v4l2_hevc_pps_num_tile_rows() helpers so the loops stay inside the buffer.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c before 6d192fc0d6faff25ecf6d52cbde4b939cb12c192; from cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c before 2887a98c03d97a6fcb6c2dab92956f2f4c402cdd; from cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c before 62ae24639d22909a5724627a0467e4bde9704020; from cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c before 4f654c9bc954569ff9b8ab860b29480c4cf6f57b; from cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c before 05e8e4cdfe692f5cedba9aa9d7b8f2584cf926c8; from cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c before 06236b094c899c22c12ac5097935eb6719293de8 | CNA record |
References
- https://git.kernel.org/stable/c/6d192fc0d6faff25ecf6d52cbde4b939cb12c192
- https://git.kernel.org/stable/c/2887a98c03d97a6fcb6c2dab92956f2f4c402cdd
- https://git.kernel.org/stable/c/62ae24639d22909a5724627a0467e4bde9704020
- https://git.kernel.org/stable/c/4f654c9bc954569ff9b8ab860b29480c4cf6f57b
- https://git.kernel.org/stable/c/05e8e4cdfe692f5cedba9aa9d7b8f2584cf926c8
- https://git.kernel.org/stable/c/06236b094c899c22c12ac5097935eb6719293de8
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.