CVE-2026-89873

7.8 HIGH

Published 2026-09-16 · Updated 2026-09-16

AI risk analysis

Summary: This vulnerability allows for potential buffer overflow issues in the Linux kernel's handling of HEVC SPS controls, which could lead to denial of service or potentially more severe consequences if exploited.
Exploitability: Exploitation requires specific conditions, such as the presence of malformed HEVC SPS data, making it moderately difficult. Precondition is the availability of the vulnerable kernel version.
Blast radius: If exploited, the impact could range from denial of service to potential kernel crashes or other severe consequences, depending on the system's configuration and the nature of the exploit.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to the specific version 6.1.11-rc1 or later.

doskernelhevcv4l2

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC limits of 64 short-term sets and 32 long-term references so drivers cannot later index beyond those controls. Also reject EXT SPS ST RPS entries whose negative or positive picture counts exceed the 16-entry arrays, or whose combined delta-POC count exceeds the HEVC DPB maximum.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.