CVE-2026-46218

Updated on 28 May 2026

Severity

7.1 High severity

Details

CVSS score
7.1

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_value The uvd/vce/vcn code accesses the IB at predefined offsets without checking that the IB is large enough. Check the bounds here. The caller is responsible for making sure it can handle arbitrary return values. Also make the idx a uint32_t to prevent overflows causing the condition to fail. A flaw was found in the Linux kernel’s drm/amdgpu driver. The uvd/vce/vcn code accesses the Instruction Buffer (IB) without sufficient bounds checking, which could allow an attacker to trigger an out-of-bounds memory access. This vulnerability may lead to system instability or a denial of service.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 12 Planned
Debian 13 Planned
Ubuntu 24.04 Planned