All vulnerabilities
CVE-2026-97425

Linux: drm/amdgpu: fix buffer overflow during vBIOS update

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 7% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4a1b0a4c5acbe96368d71157b264dcd917ba6c9eAlso 29fef371331e87311822000535f491ffc3d7a64f, 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5CVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 4a1b0a4c5acbe96368d71157b264dcd917ba6c9eLinuxCVE List
  • 29fef371331e87311822000535f491ffc3d7a64fLinuxCVE List
  • 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix buffer overflow during vBIOS update

Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing.

Text from CVE List

Affected versions 10

  • Linuxaffected: 8424f2ccb3c0dd43369288a47d15c980136c3bd5 before 4a1b0a4c5acbe96368d71157b264dcd917ba6c9eCVE List
  • Linuxaffected: 8424f2ccb3c0dd43369288a47d15c980136c3bd5 before c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992CVE List
  • Linuxaffected: 8424f2ccb3c0dd43369288a47d15c980136c3bd5 before 29fef371331e87311822000535f491ffc3d7a64fCVE List
  • Linuxaffected: 8424f2ccb3c0dd43369288a47d15c980136c3bd5 before 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5CVE List
  • Linuxaffected: 5.19CVE List
  • Linuxunaffected: all versions before 5.19CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 4