Riskcovery

CVE-2026-46230

drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

State
Published
Severity
7.1 High
Published
May 28, 2026
Updated
Oct 19, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

Check bounds against the end of the BO whenever we access the msg.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before f55552adb100eb54a6e6dabff4fbdc8679bd3fa0Affected
  • 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 82c535eff05490c71153af57de9fe85502fcb5d5Affected
  • 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 638d3e0b9eb77aa53fdd60e2b928761d16ba76faAffected
  • 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 870c8738c3774336baedddd0240951d078a703b8Affected
  • 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before 638e48ee39d0f2af9336f917a6f5d6692dd64d93Affected
  • 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7Affected
  • 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 to before b193019860d61e92da395eae2011f2f6716b182fAffected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.140 through 6.6.*Not affected
  • 6.12.90 through 6.12.*Not affected
  • 6.18.32 through 6.18.*Not affected
  • 7.0.9 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.