CVE-2026-46199

drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

State: Published
Severity: 7.1 High
Published: May 28, 2026
Updated: Oct 19, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

Check bounds against the end of the BO whenever we access the msg.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 88411caee8f576d6b5abf6531232fcc0ce756dc5Affected 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before c72a8b4dc6d598e3831ef3abd9c6527dfbf4810eAffected 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 7688143ca62edeecacb3ba0a2cea129dbd262a18Affected 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 63b51e8a9d54317d31cc3856c1e12407070d5fc2Affected 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 3c817a60b09eaab926e475088e750936efcc95aeAffected 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 0a78f2bac1424deb7c9d5e09c6b8e849d8e8b648Affected
LinuxLinux	5.13Affected before 5.13Not affected 6.1.175 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.90 through 6.12.Not affected 6.18.32 through 6.18.Not affected 7.0.9 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 88411caee8f576d6b5abf6531232fcc0ce756dc5Affected
87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before c72a8b4dc6d598e3831ef3abd9c6527dfbf4810eAffected
87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 7688143ca62edeecacb3ba0a2cea129dbd262a18Affected
87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 63b51e8a9d54317d31cc3856c1e12407070d5fc2Affected
87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 3c817a60b09eaab926e475088e750936efcc95aeAffected
87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 0a78f2bac1424deb7c9d5e09c6b8e849d8e8b648Affected

LinuxLinux

5.13Affected
before 5.13Not affected
6.1.175 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.90 through 6.12.*Not affected
6.18.32 through 6.18.*Not affected
7.0.9 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.