Answer in brief
CVE-2026-68229 records a High severity (CVSS 7.1) vulnerability in media: cedrus: skip invalid H.264 reference list entries. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.1. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <0af8945fcae742d099f59f3c725eb67235953a31 || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <9924cb548ee7753a6473997949c3ec48092de0b0 || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <e53112c2de88982e66c369aee2120d5efd78df30 || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <10358ea986c3c85516d1c8206486464f79d36e76 | 2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a, 0af8945fcae742d099f59f3c725eb67235953a31, 9924cb548ee7753a6473997949c3ec48092de0b0, e53112c2de88982e66c369aee2120d5efd78df30, 10358ea986c3c85516d1c8206486464f79d36e76 |
| Linux/Linuxgeneric | 5.10 | Not reported |
| Linux/Linuxgeneric | >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <a6a109771c51920beb620f30778c29da823cc34c || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <7ff6f728a2433b420bb372cb0e8a4eea3f2e1a4b || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <1db34683b0fbbcb3bc162380c11514ea0a44e8ab || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <0af8945fcae742d099f59f3c725eb67235953a31 || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <9924cb548ee7753a6473997949c3ec48092de0b0 || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <e53112c2de88982e66c369aee2120d5efd78df30 || >=e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c <10358ea986c3c85516d1c8206486464f79d36e76 | a6a109771c51920beb620f30778c29da823cc34c, 7ff6f728a2433b420bb372cb0e8a4eea3f2e1a4b, 1db34683b0fbbcb3bc162380c11514ea0a44e8ab, 2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a, 0af8945fcae742d099f59f3c725eb67235953a31, 9924cb548ee7753a6473997949c3ec48092de0b0, e53112c2de88982e66c369aee2120d5efd78df30, 10358ea986c3c85516d1c8206486464f79d36e76 |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 ref_pic_list0/ref_pic_list1 entries from the stateless slice control and later uses their indices to look up decode->dpb[] in _cedrus_write_ref_list(). Rejecting such controls in cedrus_try_ctrl() would break existing userspace, since stateless H.264 reference lists may legitimately carry out-of-range indices for missing references. Instead, guard the actual DPB lookup in Cedrus and skip entries whose indices do not fit the fixed V4L2_H264_NUM_DPB_ENTRIES array. This keeps the fix local to the driver use site and avoids out-of-bounds reads from malformed or unsupported reference list entries.
Quoted source text, attributed separately from HOL analysis.