CVE-2026-93179

CVE-2026-93179

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read

Reject voltage objects whose usSize is smaller than the header or would

advance the cursor past the table end, preventing an infinite loop or

heap OOB read when the VBIOS supplies a malformed VoltageObjectInfo table.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-09-17T21:18Z
References (5)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:12Z
    drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
    cvelistv5