CVE-2026-46218
HIGH EPSS 3.1%
Published May 28, 20261mo ago · Modified Jun 17, 20261w ago
7.1 CVSS 3.1
Published May 28, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_value The uvd/vce/vcn code accesses the IB at predefined offsets without checking that the IB is large enough. Check the bounds here. The caller is responsible for making sure it can handle arbitrary return values. Also make the idx a uint32_t to prevent overflows causing the condition to fail.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
3.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Affected Products 5
References 6
- git.kernel.org https://git.kernel.org/stable/c/0fb5cb556b249b2b64c0f818136c4c3e838ef53f
- git.kernel.org https://git.kernel.org/stable/c/5da6c6430be0acb25b4242bce0323fc514d4e3cf
- git.kernel.org https://git.kernel.org/stable/c/66085e206431ef88ce36f53c1f53d570790ccc9e
- git.kernel.org https://git.kernel.org/stable/c/a853178d23e774adfe3a35073c375b04b3b20f7d
- git.kernel.org https://git.kernel.org/stable/c/ee26fcf7c5cf131f0b6a732faa27d79ec61b8ec7
- git.kernel.org https://git.kernel.org/stable/c/fec8b11b55e53ff51a741e56894fe331a516f5c6
Remediation
- git.kernel.org https://git.kernel.org/stable/c/0fb5cb556b249b2b64c0f818136c4c3e838ef53f
- git.kernel.org https://git.kernel.org/stable/c/5da6c6430be0acb25b4242bce0323fc514d4e3cf
- git.kernel.org https://git.kernel.org/stable/c/66085e206431ef88ce36f53c1f53d570790ccc9e
- git.kernel.org https://git.kernel.org/stable/c/a853178d23e774adfe3a35073c375b04b3b20f7d
- git.kernel.org https://git.kernel.org/stable/c/ee26fcf7c5cf131f0b6a732faa27d79ec61b8ec7
- git.kernel.org https://git.kernel.org/stable/c/fec8b11b55e53ff51a741e56894fe331a516f5c6