CVE-2026-97427

drm/amd/pm: bound pp_dpm_set_pp_table() memcpy

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: bound pp_dpm_set_pp_table() memcpy

The powerplay path allocates hardcode_pp_table once with kmemdup(..., soft_pp_table_size). memcpy(..., size) used the sysfs store count (up to PAGE_SIZE) with no upper bound, causing heap overflow. Reject writes where size exceeds soft_pp_table_size.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a to before abe61d067b48b947bedc9bae3725cb8f48dc8c0aAffected b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a to before 9b5cb2e4eb297fe52be26fd895fc5ea28fc22bf9Affected b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a to before 43d2ab8408f9f468b232350c74160ae21e763020Affected b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a to before 3334985f8b4c7c637a829744c81518ad9a671bcbAffected b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a to before f193e71fa9fab2e68ef85201b106e8f580d3a25bAffected
LinuxLinux	4.6Affected before 4.6Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a to before abe61d067b48b947bedc9bae3725cb8f48dc8c0aAffected
b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a to before 9b5cb2e4eb297fe52be26fd895fc5ea28fc22bf9Affected
b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a to before 43d2ab8408f9f468b232350c74160ae21e763020Affected
b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a to before 3334985f8b4c7c637a829744c81518ad9a671bcbAffected
b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a to before f193e71fa9fab2e68ef85201b106e8f580d3a25bAffected

LinuxLinux

4.6Affected
before 4.6Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.