CVE-2026-97581

Received Received - Intake

Heap Overflow in Linux Kernel Video Decoder

Publication date: 2026-09-25

Last updated on: 2026-10-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity prepare_tile_info_buffer() writes one entry per tile into the tile_sizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded v4l2_hevc_pps_num_tile_columns() / v4l2_hevc_pps_num_tile_rows() helpers so the loops stay inside the buffer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-10-03

Generated

2026-10-15

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-97581

EUVD

EUVD-2026-86889

Affected Vendors & Products

Vendor	Product	Version / Range
verisilicon	hantro	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a buffer overflow risk in the media subsystem. The issue occurs in the Hantro G2 HEVC decoder when processing tile information for video streams. The prepare_tile_info_buffer() function writes tile entries into a DMA buffer sized for the maximum possible tile grid, but the loop bounds are not properly checked against actual buffer capacity. This could lead to writing beyond the allocated buffer space.

Detection Guidance

This vulnerability is specific to the Linux kernel's media subsystem and the VeriSilicon Hantro G2 HEVC decoder. Detection requires checking kernel logs for errors related to tile buffer handling in HEVC decoding. No direct network detection commands are applicable. Inspect kernel logs with 'dmesg | grep hantro' or 'journalctl -k | grep hantro' for errors.

Impact Analysis

If exploited, this vulnerability could allow an attacker to cause a denial of service by crashing the system or potentially execute arbitrary code with kernel privileges. It affects systems using the Verisilicon Hantro G2 HEVC decoder, which is common in devices handling video processing like smartphones, media players, or embedded systems.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other common standards and regulations. The issue is specific to the Linux kernel's media subsystem and involves buffer capacity in HEVC tile processing, which does not relate to data protection or privacy requirements.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for CVE-2026-97581. Monitor vendor advisories for patches specific to the verisilicon hantro driver.

Hi! I’m here to help you understand CVE-2026-97581. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70