CVE-2026-93178

CVE-2026-93178

High · published September 17, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup

vddInd and vddcInd fields from VBIOS-parsed tables are used to index into

voltage lookup tables without a bounds check. Return -EINVAL when any

index is out of range.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.7th percentile
Published
2026-09-17T21:18Z
References (8)
https://git.kernel.org/stable/c/1664327ce797e09e387dc10cbbaa5b8d76558d2c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3a8a05477cda6c8293e2b629495b42981dcaba32 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6f08c001fa6e8212930d694540ae8d9d6d3fb58a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/745297208d31222f916cc04da313cb737b997935 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8a3db9f593b643904c6cc6d8a3f211c84ca6cf8a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ce0d8e72836c9d3710a160ad848b0f1d096075e3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d9ef085114d1e3c2c1f869c0bdb275a7b358ce8b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f925d317d84d401d642e537ea18ee12f67cb6983 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:12Z
    drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup
    cvelistv5