CVE-2026-43310

media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC

State: Published
Severity: Not scored
Published: May 8, 2026
Updated: Oct 30, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC

For the i.MX8MQ platform, there is a hardware limitation: the g1 VPU and g2 VPU cannot decode simultaneously; otherwise, it will cause below bus error and produce corrupted pictures, even potentially lead to system hang.

[ 110.527986] hantro-vpu 38310000.video-codec: frame decode timed out. [ 110.583517] hantro-vpu 38310000.video-codec: bus error detected.

Therefore, it is necessary to ensure that g1 and g2 operate alternately. This allows for successful multi-instance decoding of H.264 and HEVC.

To achieve this, g1 and g2 share the same v4l2_m2m_dev, and then the v4l2_m2m_dev can handle the scheduling.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 42a9fbccb33a38c5a9e0a84680939da8eae4f60eAffected cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before f988fbf0536b42f6a05ccc1ac709d60236ec1aa6Affected cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before f2efc1e8ab65bdb9b892af132887323e4df92f02Affected cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 5133ef7c893c2c3aee7dd12503dc480de9dbfbb5Affected cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 286d629d10640bc22f3bf46aa4f356eb7975e862Affected cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before e0203ddf9af7c8e170e1e99ce83b4dc07f0cd765Affected
LinuxLinux	5.14Affected before 5.14Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 42a9fbccb33a38c5a9e0a84680939da8eae4f60eAffected
cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before f988fbf0536b42f6a05ccc1ac709d60236ec1aa6Affected
cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before f2efc1e8ab65bdb9b892af132887323e4df92f02Affected
cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 5133ef7c893c2c3aee7dd12503dc480de9dbfbb5Affected
cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before 286d629d10640bc22f3bf46aa4f356eb7975e862Affected
cb5dd5a0fa518dff14ff2b90837c3c8f98f4dd5c to before e0203ddf9af7c8e170e1e99ce83b4dc07f0cd765Affected

LinuxLinux

5.14Affected
before 5.14Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.