CVEvulnerability
CVE-2026-93179
- Status
- Received
- Published
- 2026-09-17
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
Reject voltage objects whose usSize is smaller than the header or would
advance the cursor past the table end, preventing an infinite loop or
heap OOB read when the VBIOS supplies a malformed VoltageObjectInfo table.
References
- https://git.kernel.org/stable/c/0a6c9b3801903b6db91f3cbf148646b501dbded3 git.kernel.org
- https://git.kernel.org/stable/c/203ffe648948ca3c2f55b21118945a7a6d0884aa git.kernel.org
- https://git.kernel.org/stable/c/574af7c61f2bed37baa3b60669e428d24d2c9ae8 git.kernel.org
- https://git.kernel.org/stable/c/5d3cc8e388464f485d0944b87b8f9426e637d082 git.kernel.org
- https://git.kernel.org/stable/c/83c680de6d41d627c077dedb24f89d9e5be0e2a2 git.kernel.org