Wind River Support Network

HomeDefectsLIN1024-32662
Fixed

LIN1024-32662 : Security Advisory - linux - CVE-2026-89873

Created: Oct 8, 2026    Updated: Oct 13, 2026
Resolved Date: Oct 8, 2026
Found In Version: 10.24.33.2
Fix Version: 10.24.33.5
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  media: v4l2-ctrls: validate HEVC EXT SPS RPS counts  The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC limits of 64 short-term sets and 32 long-term references so drivers cannot later index beyond those controls.  Also reject EXT SPS ST RPS entries whose negative or positive picture counts exceed the 16-entry arrays, or whose combined delta-POC count exceeds the HEVC DPB maximum.

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube