CVE-2026-97581 media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
A buffer overflow in the Linux kernel Hantro HEVC driver allows attackers to cause memory corruption, potentially leading to code execution or system crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-97581?
CVE-2026-97581 is a memory corruption vulnerability in Linux, published on 25 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
prepare_tile_info_buffer() writes one entry per tile into the tile_sizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded v4l2_hevc_pps_num_tile_columns() / v4l2_hevc_pps_num_tile_rows() helpers so the loops stay inside the buffer.
Which versions are affected by CVE-2026-97581?
How do I fix CVE-2026-97581?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-97581 being exploited?
There is no known exploitation of CVE-2026-97581 in the wild and no public exploit code.
Sources
Also known as AZL-104826, BELL-CVE-2026-97581, DEBIAN-CVE-2026-97581, GHSA-g7px-hwh6-xc48, UBUNTU-CVE-2026-97581.