CVE-2026-46204

drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

State: Published
Severity: 7.1 High
Published: May 28, 2026
Updated: Oct 30, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

Rewrite the IB parsing to use amdgpu_ib_get_value() which handles the bounds checks.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	0b15205c7325dc20b7da0068307670d222d66949 to before 92724364702fd12d99f441a4af11d9c8bcd52217Affected 0b15205c7325dc20b7da0068307670d222d66949 to before 1dc005775fb5b3f86464406452b17364f85581d3Affected 0b15205c7325dc20b7da0068307670d222d66949 to before d0802a8877d730260d4af4dd4e0b6cde7e0e593fAffected 0b15205c7325dc20b7da0068307670d222d66949 to before a6d5563ba1f03a049561cd347574613167294e8dAffected 0b15205c7325dc20b7da0068307670d222d66949 to before 5c3e8ebad0c9e2354ddfa8f2148dc4f70a3b4bd1Affected 0b15205c7325dc20b7da0068307670d222d66949 to before 2444eb0ec8283f4a3845eb7febad378476e1ba3cAffected
LinuxLinux	6.0Affected before 6.0Not affected 6.1.191 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.90 through 6.12.Not affected 6.18.32 through 6.18.Not affected 7.0.9 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

0b15205c7325dc20b7da0068307670d222d66949 to before 92724364702fd12d99f441a4af11d9c8bcd52217Affected
0b15205c7325dc20b7da0068307670d222d66949 to before 1dc005775fb5b3f86464406452b17364f85581d3Affected
0b15205c7325dc20b7da0068307670d222d66949 to before d0802a8877d730260d4af4dd4e0b6cde7e0e593fAffected
0b15205c7325dc20b7da0068307670d222d66949 to before a6d5563ba1f03a049561cd347574613167294e8dAffected
0b15205c7325dc20b7da0068307670d222d66949 to before 5c3e8ebad0c9e2354ddfa8f2148dc4f70a3b4bd1Affected
0b15205c7325dc20b7da0068307670d222d66949 to before 2444eb0ec8283f4a3845eb7febad378476e1ba3cAffected

LinuxLinux

6.0Affected
before 6.0Not affected
6.1.191 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.90 through 6.12.*Not affected
6.18.32 through 6.18.*Not affected
7.0.9 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.