All vulnerabilities
CVE-2026-97494

Linux: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in8ddda06ae356fda0418b7017e658d976dad6214eAlso 25bec2425c3d50ba9a92ad87bbf8628be29e5c32, 1aa55af304a2decaacca1d1fabe4257c277ca54aCVE List
Published24 Sep 2026Updated 21 Oct 2026CVE List

What fixes it

  • 8ddda06ae356fda0418b7017e658d976dad6214eLinuxCVE List
  • 25bec2425c3d50ba9a92ad87bbf8628be29e5c32LinuxCVE List
  • 1aa55af304a2decaacca1d1fabe4257c277ca54aLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw

Change psp_copy_fw from void to int: return -ENODEV when drm_dev_enter fails, and -EINVAL when the image size is zero or larger than the 1 MiB PSP private buffer.

Replace open-coded memset/memcpy into fw_pri_buf with psp_copy_fw.

Text from CVE List

Affected versions 10

  • Linuxaffected: 2b0c3aee2172451e9f982b25f3fdf59a1b687dc3 before 8ddda06ae356fda0418b7017e658d976dad6214eCVE List
  • Linuxaffected: 2b0c3aee2172451e9f982b25f3fdf59a1b687dc3 before 25bec2425c3d50ba9a92ad87bbf8628be29e5c32CVE List
  • Linuxaffected: 2b0c3aee2172451e9f982b25f3fdf59a1b687dc3 before 1aa55af304a2decaacca1d1fabe4257c277ca54aCVE List
  • Linuxaffected: 2b0c3aee2172451e9f982b25f3fdf59a1b687dc3 before d1f9f5839bd785a3a06335a01d53282e80f8e5faCVE List
  • Linuxaffected: 4.12CVE List
  • Linuxunaffected: all versions before 4.12CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 4