SB20260928357 - Improper Validation of Specified Quantity in Input in Linux kernel media v4l2-core driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Validation of Specified Quantity in Input (CVE-ID: CVE-2026-97575)

CWE-ID: CWE-1284 - Improper Validation of Specified Quantity in Input

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to compromise confidentiality, integrity, and availability.

The vulnerability exists due to improper validation of tile counts in the V4L2 AV1 frame control validation logic when processing V4L2 AV1 frame controls. A local user can submit a crafted control with excessive tile column or row counts to compromise confidentiality, integrity, and availability.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/439058ced617fbb3febc017b9e93bb7387f309e0
• https://git.kernel.org/stable/c/85df9fc79b07f1cc7c953f930ae7e675d0c1e820
• https://git.kernel.org/stable/c/c4c88b5ba85685043d171e0e9c9d00a8cf6a89e8
• https://git.kernel.org/stable/c/c8891da0186fe4c04bccbbd7d84b01a3c941ac7a