CVE-2026-46204CWE-125

CVE-2026-46204

High · published May 28, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

Rewrite the IB parsing to use amdgpu_ib_get_value() which handles the

bounds checks.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00131 · 2.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-05-28T14:16Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 6.0, < 6.6.1406.6.140
linux/linux_kernel≥ 6.7, < 6.12.906.12.90
linux/linux_kernel≥ 6.13, < 6.18.326.18.32
linux/linux_kernel≥ 6.19, < 7.0.97.0.9
References (5)
https://git.kernel.org/stable/c/1dc005775fb5b3f86464406452b17364f85581d3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2444eb0ec8283f4a3845eb7febad378476e1ba3c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5c3e8ebad0c9e2354ddfa8f2148dc4f70a3b4bd1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a6d5563ba1f03a049561cd347574613167294e8d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d0802a8877d730260d4af4dd4e0b6cde7e0e593f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 28 MAY 09:40Z
    drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
    cvelistv5