Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-46230

drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.15.209, 6.1.175, 6.6.140, 6.12.90, 6.18.32, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg Check bounds against the end of the BO whenever we access the msg.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 · fixed in f55552adb100eb54a6e6dabff4fbdc8679bd3fa0; From 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 · fixed in 82c535eff05490c71153af57de9fe85502fcb5d5; From 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 · fixed in 638d3e0b9eb77aa53fdd60e2b928761d16ba76fa; From 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 · fixed in 870c8738c3774336baedddd0240951d078a703b8; From 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 · fixed in 638e48ee39d0f2af9336f917a6f5d6692dd64d93; From 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 · fixed in e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7; From 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 · fixed in b193019860d61e92da395eae2011f2f6716b182f

  • Linux Linux

    5.13

  • KernelLinux

    From 5.13.0 · fixed in 5.15.209; From 5.16.0 · fixed in 6.1.175; From 6.2.0 · fixed in 6.6.140; From 6.7.0 · fixed in 6.12.90; From 6.13.0 · fixed in 6.18.32; From 6.19.0 · fixed in 7.0.9

References 7

git.kernel.org