CVE-2026-97575
Received Received - Intake

Buffer Overflow in Linux Kernel V4L2 AV1 Decoder

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate AV1 tile counts The stateless AV1 decoders use tile_info.tile_cols and tile_rows as loop bounds and as indices into the mi_*_starts[] and *_in_sbs_minus_1[] arrays, as the divisor for context_update_tile_id, and their product bounds the per-tile descriptor buffers, but std_validate_compound() does not bound these u8 fields. Reject a V4L2_CTRL_TYPE_AV1_FRAME whose tile_cols or tile_rows exceeds V4L2_AV1_MAX_TILE_COLS / _ROWS, or whose product exceeds V4L2_AV1_MAX_TILE_COUNT. A zero tile count is left to the consuming driver so the zero-initialised control that existing userspace submits is still accepted.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-97575
EUVD
EUVD-2026-86883

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper validation of AV1 tile counts in the V4L2 control subsystem. The stateless AV1 decoders use tile counts as loop bounds and array indices without proper validation, potentially leading to out-of-bounds access or buffer overflows.

Detection Guidance

This vulnerability is specific to the Linux kernel's media subsystem and AV1 decoder validation. Detection requires checking kernel versions and media driver configurations. Use commands like 'uname -a' to check kernel version and 'lsmod | grep videodev' to verify media drivers. Monitor kernel logs for AV1-related errors or crashes.

Impact Analysis

An attacker could exploit this to cause memory corruption, crashes, or potentially execute arbitrary code in the kernel context. This could lead to system instability, privilege escalation, or denial of service if exploited.

Mitigation Strategies

Apply the latest kernel security updates from your distribution. If updates are unavailable, disable AV1 decoding in applications using V4L2 or restrict access to vulnerable media drivers. Monitor vendor advisories for patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97575. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart