drm/amdgpu: Reject UVD message with dimensions above 4096 (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.17 % · centile 6 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. (cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10)
Références
- https://git.kernel.org/stable/c/8bae80eaed00e7ae28412a3cdf590f4beca72294
- https://git.kernel.org/stable/c/9adc5e25f31d7ee7dfc18814499b6e3a6d402904
- https://git.kernel.org/stable/c/382bef781ff441ce8055bdada57b8c291dc0fd30
- https://git.kernel.org/stable/c/8435d41afcf2bc31ecee213ef651c12bd1a16d38
- https://git.kernel.org/stable/c/f7af372d3b892b95dd3cd1c6acf29daa39ba076d
- https://git.kernel.org/stable/c/339deb76ee4859ea973e435c9a9a4a4fefc29338
- https://git.kernel.org/stable/c/17fbb996c05f2190e0fa20927ca0b9804d481b02
- https://git.kernel.org/stable/c/8c9aebcdd9f46f7a14b98d6ab18574b7a48fbb08
Références européennes
- ENISA EUVD · EUVD-2026-71667
- GCVE · GCVE-0-2026-80908
Avis du CERT-FR
- CERTFR-2026-AVI-1335 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 8bae80eaed00e7ae28412a3cdf590f4beca72294 ; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 9adc5e25f31d7ee7dfc18814499b6e3a6d402904 ; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 382bef781ff441ce8055bdada57b8c291dc0fd30 ; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 8435d41afcf2bc31ecee213ef651c12bd1a16d38 ; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < f7af372d3b892b95dd3cd1c6acf29daa39ba076d ; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 < 339deb76ee4859ea973e435c9a9a4a4fefc29338 |
| Linux · Linux | affected 4.2 ; unaffected 0 < 4.2 ; unaffected 5.10.266 ≤ 5.10.* ; unaffected 5.15.217 ≤ 5.15.* ; unaffected 6.1.184 ≤ 6.1.* ; unaffected 6.6.153 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |