CVE-2026-97575

A flaw was found in the Linux kernel's Video4Linux2 (V4L2) subsystem. The stateless AV1 video decoding interface fails to properly validate tile dimensions in frame control requests. A local attacker can exploit this vulnerability by submitting a specially crafted frame configuration with excessive tile counts, leading to out-of-bounds memory access. This flaw can result in a Denial of Service (DoS) via a kernel crash or potentially allow local privilege escalation.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation is restricted to local attackers and requires underlying hardware or drivers that support stateless AV1 video decoding. The issue stems from insufficient boundary checks on tile parameters within the Video4Linux2 framework, which can lead to out-of-bounds memory access during frame processing. Typical enterprise deployments do not expose media capture or decoding interfaces to unprivileged users, limiting the primary impact to a local denial of service through a system crash or potential privilege escalation on configured systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.