CVE-2026-43222
MediumSummary
A vulnerability related to the tile info buffer size in the AV1 module for Verisilicon has been fixed in the Linux kernel. The issue involved incorrect memory allocation for tile information, which could lead to operational errors.
Risk Assessment
Improper memory allocation may lead to system crashes or unexpected behavior of applications using this module, posing a risk to system stability and security.
Recommendation
It is recommended to update the Linux kernel to the latest version to eliminate this vulnerability and ensure proper memory allocation in the AV1 module.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: AV1: Fix tile info buffer size Each tile info is composed of: row_sb, col_sb, start_pos and end_pos (4 bytes each). So the total required memory is AV1_MAX_TILES * 16 bytes. Use the correct #define to allocate