CVE-2026-46218

7.1 Élevée

Publiée le 28/05/2026 à 12:16 · Modifiée le 17/06/2026 à 12:53 · Analysée par le NVD · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_value The uvd/vce/vcn code accesses the IB at predefined offsets without checking that the IB is large enough. Check the bounds here. The caller is responsible for making sure it can handle arbitrary return values. Also make the idx a uint32_t to prevent overflows causing the condition to fail.

Traduire en français

Produits concernés

Linux
Linux linux kernel

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.1 Élevée	416baaa9-dc9f-4396-8d5f-8c081fb06d67	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H`

Références

https://git.kernel.org/stable/c/0fb5cb556b249b2b64c0f818136c4c3e838ef53f Patch
https://git.kernel.org/stable/c/5da6c6430be0acb25b4242bce0323fc514d4e3cf Patch
https://git.kernel.org/stable/c/66085e206431ef88ce36f53c1f53d570790ccc9e Patch
https://git.kernel.org/stable/c/a853178d23e774adfe3a35073c375b04b3b20f7d Patch
https://git.kernel.org/stable/c/ee26fcf7c5cf131f0b6a732faa27d79ec61b8ec7 Patch
https://git.kernel.org/stable/c/fec8b11b55e53ff51a741e56894fe331a516f5c6 Patch

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories