media: v4l2-ctrls: validate HEVC active reference counts

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-68206 · Microsoft / collected KEV context

cve-program · CVE-2026-68206

• https://git.kernel.org/stable/c/3299c3905f3fb439ebd892658b87bc76c93ae116
• https://git.kernel.org/stable/c/9a998cc1c348769262d433acb7d238c5fac4b2e0
• https://git.kernel.org/stable/c/dbaf0e0023e2f9332c5164822def7f80b7d2c5ef
• https://git.kernel.org/stable/c/3068ab802fc98b121dcb451e1f7f4d338ffc7a19
• https://git.kernel.org/stable/c/b01df98a6669d2b67d8aed816021b327fd905998
• https://git.kernel.org/stable/c/afbe4bc252d90a6f8fad869b06d5430f615f22f9

No related operational record is retained in the current change model.