All vulnerabilities
CVE-2026-97428

Linux: drm/amdgpu: harden FRU PIA parsing with bounded helpers

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
7.7High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.14%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in567d7c3f93f8d6bdc946a557a160ee1c42cfae91Also 813311512505e95e4e3c898ff94b11886a15e494, 4396d74b0c7304946ee343a6611ac6dbc0bfbf78CVE List
Published24 Sep 2026Updated 21 Oct 2026CVE List

What fixes it

  • 567d7c3f93f8d6bdc946a557a160ee1c42cfae91LinuxCVE List
  • 813311512505e95e4e3c898ff94b11886a15e494LinuxCVE List
  • 4396d74b0c7304946ee343a6611ac6dbc0bfbf78LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: harden FRU PIA parsing with bounded helpers

Replace the open-coded TLV walk with fru_pia_advance() and fru_pia_copy_field() helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on truncated or malformed FRU data.

Text from CVE List

Affected versions 10

  • Linuxaffected: 0dbf2c56262532fbd498f590c91c4085413b8829 before 567d7c3f93f8d6bdc946a557a160ee1c42cfae91CVE List
  • Linuxaffected: 0dbf2c56262532fbd498f590c91c4085413b8829 before 813311512505e95e4e3c898ff94b11886a15e494CVE List
  • Linuxaffected: 0dbf2c56262532fbd498f590c91c4085413b8829 before 4396d74b0c7304946ee343a6611ac6dbc0bfbf78CVE List
  • Linuxaffected: 0dbf2c56262532fbd498f590c91c4085413b8829 before c990c05eb6c74c98d1ff3acf67a19015312820b7CVE List
  • Linuxaffected: 6.2CVE List
  • Linuxunaffected: all versions before 6.2CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 4