01 Record

CVE-2026-68229

media: cedrus: skip invalid H.264 reference list entries

HighPUBLISHEDCNA: Linux

CNA base score7.1 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

View raw JSON

02 Description

media: cedrus: skip invalid H.264 reference list entries

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 4.6% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Received. NVD last modified this record on 2026-08-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-10 12:00Z2 MO AGO

Last updated

2026-08-19 16:32Z2 MO AGO

Reserved

2026-07-30

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.1)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

737809c80deed0f7f1c4321d9bb992e0909bda53a0569b08812e21fe22bfeb37

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe000e1fa4bdbd783149e7f97cf3be61e1c0bab8c to < a6a109771c51920beb620f30778c29da823cc34c, e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c to < 7ff6f728a2433b420bb372cb0e8a4eea3f2e1a4b, e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c to < 1db34683b0fbbcb3bc162380c11514ea0a44e8ab, e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c to < 2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a, e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c to < 0af8945fcae742d099f59f3c725eb67235953a31, e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c to < 9924cb548ee7753a6473997949c3ec48092de0b0, e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c to < e53112c2de88982e66c369aee2120d5efd78df30, e000e1fa4bdbd783149e7f97cf3be61e1c0bab8c to < 10358ea986c3c85516d1c8206486464f79d36e76, 5.10—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a6a109771c51920beb620f30778c29da823cc34c
git.kernel.orghttps://git.kernel.org/stable/c/7ff6f728a2433b420bb372cb0e8a4eea3f2e1a4b
git.kernel.orghttps://git.kernel.org/stable/c/1db34683b0fbbcb3bc162380c11514ea0a44e8ab
git.kernel.orghttps://git.kernel.org/stable/c/2ee8327c85b3ac7b532d2d6a1e3a295d5ad7414a
git.kernel.orghttps://git.kernel.org/stable/c/0af8945fcae742d099f59f3c725eb67235953a31
git.kernel.orghttps://git.kernel.org/stable/c/9924cb548ee7753a6473997949c3ec48092de0b0
git.kernel.orghttps://git.kernel.org/stable/c/e53112c2de88982e66c369aee2120d5efd78df30
git.kernel.orghttps://git.kernel.org/stable/c/10358ea986c3c85516d1c8206486464f79d36e76

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.101-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.101-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.