CVE-2026-68229
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
17/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: cedrus: skip invalid H.264 reference list entries<br />
<br />
Cedrus consumes H.264 ref_pic_list0/ref_pic_list1 entries from the<br />
stateless slice control and later uses their indices to look up<br />
decode->dpb[] in _cedrus_write_ref_list().<br />
<br />
Rejecting such controls in cedrus_try_ctrl() would break existing<br />
userspace, since stateless H.264 reference lists may legitimately carry<br />
out-of-range indices for missing references. Instead, guard the actual<br />
DPB lookup in Cedrus and skip entries whose indices do not fit the fixed<br />
V4L2_H264_NUM_DPB_ENTRIES array.<br />
<br />
This keeps the fix local to the driver use site and avoids out-of-bounds<br />
reads from malformed or unsupported reference list entries.
Impacto
Puntuación base 3.x
7.10
Gravedad 3.x
ALTA
Referencias a soluciones, herramientas e información
- https://git.kernel.org/stable/c/0af8945fcae742d099f59f3c725eb67235953a31
- https://git.kernel.org/stable/c/10358ea986c3c85516d1c8206486464f79d36e76
- https://git.kernel.org/stable/c/2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a
- https://git.kernel.org/stable/c/9924cb548ee7753a6473997949c3ec48092de0b0
- https://git.kernel.org/stable/c/e53112c2de88982e66c369aee2120d5efd78df30