CVE-2026-53375

drm/amdgpu/vce: Prevent partial address patches

State: Published
Severity: 8.8 High
Published: Jul 19, 2026
Updated: Oct 19, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vce: Prevent partial address patches

In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	Linux

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 2d66d1f5d8c0434e9a5ad21cc6eaf3a5e32141d5Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 944db9cfa5373f67eb94621d4c2eee572c05fa3fAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 0ee17150763962671f43a62ddf8f6ea1feaff438Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before b3d1a0a45c4aec484fa2a5b060b611e3d3064470Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before ea2c554e700b86a04534b4c24ece5844e8c5f07eAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before de2a02cc28d6d5d37db07d00a9a684c754a5fd74Affected
LinuxLinux	4.2Affected before 4.2Not affected 6.1.175 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.90 through 6.12.Not affected 6.18.32 through 6.18.Not affected 7.0.9 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 2d66d1f5d8c0434e9a5ad21cc6eaf3a5e32141d5Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 944db9cfa5373f67eb94621d4c2eee572c05fa3fAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 0ee17150763962671f43a62ddf8f6ea1feaff438Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before b3d1a0a45c4aec484fa2a5b060b611e3d3064470Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before ea2c554e700b86a04534b4c24ece5844e8c5f07eAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before de2a02cc28d6d5d37db07d00a9a684c754a5fd74Affected

LinuxLinux

4.2Affected
before 4.2Not affected
6.1.175 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.90 through 6.12.*Not affected
6.18.32 through 6.18.*Not affected
7.0.9 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.