CVE-2026-80540

drm/amdgpu: Fix UVD decode image min size calculation

State: Published
Severity: 7.8 High
Published: Aug 26, 2026
Updated: Oct 16, 2026
Reserved: Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix UVD decode image min size calculation

This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow.

(cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before bc7397a033ac52f6d8c9bb6510d61694b2a3fce7Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before d058f7a6709441afe1784eecd8c0643dd84750bcAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before b7549e3f96c78921751c4b3e69af729662130d83Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 60539d517e8439621532d8c01091ac049c596b4bAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 271a7da84a6262a09de549912dcf6a749d169cb6Affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 25ee120f3803ad9e416ef9f76f4c3234cc4d645bAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 5cbd8af02b0b9c8723fa30edcf6fccab5170af8dAffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before b8bb9ba3f101a1b0011f785a577a4a0a38371174Affected
LinuxLinux	4.2Affected before 4.2Not affected 5.10.266 through 5.10.Not affected 5.15.217 through 5.15.Not affected 6.1.184 through 6.1.Not affected 6.6.153 through 6.6.Not affected 6.12.105 through 6.12.Not affected 6.18.46 through 6.18.Not affected 7.1.10 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before bc7397a033ac52f6d8c9bb6510d61694b2a3fce7Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before d058f7a6709441afe1784eecd8c0643dd84750bcAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before b7549e3f96c78921751c4b3e69af729662130d83Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 60539d517e8439621532d8c01091ac049c596b4bAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 271a7da84a6262a09de549912dcf6a749d169cb6Affected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 25ee120f3803ad9e416ef9f76f4c3234cc4d645bAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before 5cbd8af02b0b9c8723fa30edcf6fccab5170af8dAffected
d38ceaf99ed015f2a0b9af3499791bd3a3daae21 to before b8bb9ba3f101a1b0011f785a577a4a0a38371174Affected

LinuxLinux

4.2Affected
before 4.2Not affected
5.10.266 through 5.10.*Not affected
5.15.217 through 5.15.*Not affected
6.1.184 through 6.1.*Not affected
6.6.153 through 6.6.*Not affected
6.12.105 through 6.12.*Not affected
6.18.46 through 6.18.*Not affected
7.1.10 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.