CVE-2026-46218

drm/amdgpu: Add bounds checking to ib_{get,set}_value

High · published May 28, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Add bounds checking to ib_{get,set}_value

The uvd/vce/vcn code accesses the IB at predefined offsets without

checking that the IB is large enough. Check the bounds here. The caller

is responsible for making sure it can handle arbitrary return values.

Also make the idx a uint32_t to prevent overflows causing the condition

to fail.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.6th percentile
Published
2026-05-28T09:40Z
EPSS history
Timeline
  • 28 MAY 09:40Z
    drm/amdgpu: Add bounds checking to ib_{get,set}_value
    cvelistv5