CVE-2026-97425

drm/amdgpu: fix buffer overflow during vBIOS update

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 30, 2026
Reserved: Sep 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix buffer overflow during vBIOS update

Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8424f2ccb3c0dd43369288a47d15c980136c3bd5 to before bce28deb42b9e8d368648a002ffe3a6124c482aaAffected 8424f2ccb3c0dd43369288a47d15c980136c3bd5 to before 4a1b0a4c5acbe96368d71157b264dcd917ba6c9eAffected 8424f2ccb3c0dd43369288a47d15c980136c3bd5 to before c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992Affected 8424f2ccb3c0dd43369288a47d15c980136c3bd5 to before 29fef371331e87311822000535f491ffc3d7a64fAffected 8424f2ccb3c0dd43369288a47d15c980136c3bd5 to before 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5Affected
LinuxLinux	5.19Affected before 5.19Not affected 6.1.191 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

8424f2ccb3c0dd43369288a47d15c980136c3bd5 to before bce28deb42b9e8d368648a002ffe3a6124c482aaAffected
8424f2ccb3c0dd43369288a47d15c980136c3bd5 to before 4a1b0a4c5acbe96368d71157b264dcd917ba6c9eAffected
8424f2ccb3c0dd43369288a47d15c980136c3bd5 to before c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992Affected
8424f2ccb3c0dd43369288a47d15c980136c3bd5 to before 29fef371331e87311822000535f491ffc3d7a64fAffected
8424f2ccb3c0dd43369288a47d15c980136c3bd5 to before 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5Affected

LinuxLinux

5.19Affected
before 5.19Not affected
6.1.191 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.