CVE-2026-80909
drm/amdgpu: Reject UVD message with invalid number of h265 refs
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. (cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5)
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
4.2
References 8
git.kernel.org
- stable/c/1facad2a78c1a8aeecc36eb4d560c7f1e10ce198
- stable/c/499907e5d46e575e96967c0230a0a6af980a17ab
- stable/c/cbf1c84bf5cac2b3742ea3d2085fa713424465cc
- stable/c/a930c54cb67200de8bc0de87480d09ece7dcd85d
- stable/c/2abcdc5f738574e7fcdd9417575dffb877fdc26f
- stable/c/e304c3e0d9ce251887be1f274aa0ed52219d5fd7
- stable/c/0acdf1a575f59bd46717d5c487d84575af5bee8f
- stable/c/9fca434208f1f9ab977feac62df8ebb1cc7ce893