All vulnerabilities
CVE-2026-97427

Linux: drm/amd/pm: bound pp_dpm_set_pp_table() memcpy

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 7% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in9b5cb2e4eb297fe52be26fd895fc5ea28fc22bf9Also 43d2ab8408f9f468b232350c74160ae21e763020, 3334985f8b4c7c637a829744c81518ad9a671bcbCVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 9b5cb2e4eb297fe52be26fd895fc5ea28fc22bf9LinuxCVE List
  • 43d2ab8408f9f468b232350c74160ae21e763020LinuxCVE List
  • 3334985f8b4c7c637a829744c81518ad9a671bcbLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: bound pp_dpm_set_pp_table() memcpy

The powerplay path allocates hardcode_pp_table once with kmemdup(..., soft_pp_table_size). memcpy(..., size) used the sysfs store count (up to PAGE_SIZE) with no upper bound, causing heap overflow. Reject writes where size exceeds soft_pp_table_size.

Text from CVE List

Affected versions 12

  • Linuxaffected: b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a before abe61d067b48b947bedc9bae3725cb8f48dc8c0aCVE List
  • Linuxaffected: b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a before 9b5cb2e4eb297fe52be26fd895fc5ea28fc22bf9CVE List
  • Linuxaffected: b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a before 43d2ab8408f9f468b232350c74160ae21e763020CVE List
  • Linuxaffected: b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a before 3334985f8b4c7c637a829744c81518ad9a671bcbCVE List
  • Linuxaffected: b9c1a77e8cd73aa42c2736b6b0ffddda6230af1a before f193e71fa9fab2e68ef85201b106e8f580d3a25bCVE List
  • Linuxaffected: 4.6CVE List
  • Linuxunaffected: all versions before 4.6CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 5