Answer in brief
CVE-2026-43222 records a Unknown severity vulnerability in media: verisilicon: AV1: Fix tile info buffer size. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=727a400686a2c0d25015c9e44916a59b72882f83 <a5b1ddbe31f49b4da78642157589970e9b60a231 || >=727a400686a2c0d25015c9e44916a59b72882f83 <34f36f9c6114af781a5a4f7a7c99334c85b73fc7 || >=727a400686a2c0d25015c9e44916a59b72882f83 <f122f2b3ce9dbde60bf7ab0b180fe4a01f9d9bc4 || >=727a400686a2c0d25015c9e44916a59b72882f83 <74abfadd7ef5ac9f3a6111d550cc651d1457c641 || >=727a400686a2c0d25015c9e44916a59b72882f83 <a505ca2db89ad92a8d8d27fa68ebafb12e04a679 | a5b1ddbe31f49b4da78642157589970e9b60a231, 34f36f9c6114af781a5a4f7a7c99334c85b73fc7, f122f2b3ce9dbde60bf7ab0b180fe4a01f9d9bc4, 74abfadd7ef5ac9f3a6111d550cc651d1457c641, a505ca2db89ad92a8d8d27fa68ebafb12e04a679 |
| Linux/Linuxgeneric | 6.5 | Not reported |
Published upstream
May 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: AV1: Fix tile info buffer size Each tile info is composed of: row_sb, col_sb, start_pos and end_pos (4 bytes each). So the total required memory is AV1_MAX_TILES * 16 bytes. Use the correct #define to allocate the buffer and avoid writing tile info in non-allocated memory.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-43222 records a Unknown severity vulnerability in media: verisilicon: AV1: Fix tile info buffer size. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=727a400686a2c0d25015c9e44916a59b72882f83 <a5b1ddbe31f49b4da78642157589970e9b60a231 || >=727a400686a2c0d25015c9e44916a59b72882f83 <34f36f9c6114af781a5a4f7a7c99334c85b73fc7 || >=727a400686a2c0d25015c9e44916a59b72882f83 <f122f2b3ce9dbde60bf7ab0b180fe4a01f9d9bc4 || >=727a400686a2c0d25015c9e44916a59b72882f83 <74abfadd7ef5ac9f3a6111d550cc651d1457c641 || >=727a400686a2c0d25015c9e44916a59b72882f83 <a505ca2db89ad92a8d8d27fa68ebafb12e04a679 | a5b1ddbe31f49b4da78642157589970e9b60a231, 34f36f9c6114af781a5a4f7a7c99334c85b73fc7, f122f2b3ce9dbde60bf7ab0b180fe4a01f9d9bc4, 74abfadd7ef5ac9f3a6111d550cc651d1457c641, a505ca2db89ad92a8d8d27fa68ebafb12e04a679 |
| Linux/Linuxgeneric | 6.5 | Not reported |
Published upstream
May 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: AV1: Fix tile info buffer size Each tile info is composed of: row_sb, col_sb, start_pos and end_pos (4 bytes each). So the total required memory is AV1_MAX_TILES * 16 bytes. Use the correct #define to allocate the buffer and avoid writing tile info in non-allocated memory.
Quoted source text, attributed separately from HOL analysis.