CVE-2026-93179

drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read

Reject voltage objects whose usSize is smaller than the header or would advance the cursor past the table end, preventing an infinite loop or heap OOB read when the VBIOS supplies a malformed VoltageObjectInfo table.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c82baa28184356a75c0157129f88af42b2e7b695 to before ed84504713e8357f33693f638fda68fc98f0c9d2Affected c82baa28184356a75c0157129f88af42b2e7b695 to before 86644d37d2b388854b2cfd4d4f57b3d84a57154bAffected c82baa28184356a75c0157129f88af42b2e7b695 to before e5b3c485ef911358752a3abbf3705d05d0eafd7aAffected c82baa28184356a75c0157129f88af42b2e7b695 to before 574af7c61f2bed37baa3b60669e428d24d2c9ae8Affected c82baa28184356a75c0157129f88af42b2e7b695 to before 203ffe648948ca3c2f55b21118945a7a6d0884aaAffected c82baa28184356a75c0157129f88af42b2e7b695 to before 0a6c9b3801903b6db91f3cbf148646b501dbded3Affected c82baa28184356a75c0157129f88af42b2e7b695 to before 83c680de6d41d627c077dedb24f89d9e5be0e2a2Affected c82baa28184356a75c0157129f88af42b2e7b695 to before 5d3cc8e388464f485d0944b87b8f9426e637d082Affected
LinuxLinux	4.5Affected before 4.5Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

c82baa28184356a75c0157129f88af42b2e7b695 to before ed84504713e8357f33693f638fda68fc98f0c9d2Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before 86644d37d2b388854b2cfd4d4f57b3d84a57154bAffected
c82baa28184356a75c0157129f88af42b2e7b695 to before e5b3c485ef911358752a3abbf3705d05d0eafd7aAffected
c82baa28184356a75c0157129f88af42b2e7b695 to before 574af7c61f2bed37baa3b60669e428d24d2c9ae8Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before 203ffe648948ca3c2f55b21118945a7a6d0884aaAffected
c82baa28184356a75c0157129f88af42b2e7b695 to before 0a6c9b3801903b6db91f3cbf148646b501dbded3Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before 83c680de6d41d627c077dedb24f89d9e5be0e2a2Affected
c82baa28184356a75c0157129f88af42b2e7b695 to before 5d3cc8e388464f485d0944b87b8f9426e637d082Affected

LinuxLinux

4.5Affected
before 4.5Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.