CVE-2026-80540

CVE-2026-80540

High · published August 26, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix UVD decode image min size calculation

This needs to use pitch instead of width. Also reject pitch

over 4096 to avoid overflow.

(cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00129 · 2.3th percentile
Published
2026-08-26T19:17Z
References (8)
https://git.kernel.org/stable/c/25ee120f3803ad9e416ef9f76f4c3234cc4d645b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/271a7da84a6262a09de549912dcf6a749d169cb6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5cbd8af02b0b9c8723fa30edcf6fccab5170af8d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/60539d517e8439621532d8c01091ac049c596b4b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b7549e3f96c78921751c4b3e69af729662130d83 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b8bb9ba3f101a1b0011f785a577a4a0a38371174 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bc7397a033ac52f6d8c9bb6510d61694b2a3fce7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d058f7a6709441afe1784eecd8c0643dd84750bc · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 28 AUG 06:54Z
    EPSS moved — → 0%
    epss
  • 26 AUG 14:37Z
    drm/amdgpu: Fix UVD decode image min size calculation
    cvelistv5