What’s Vulnerable › Vulnerabilities

CVE-2026-46199: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-28 · updated 2026-10-19
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg Check bounds against the end of the BO whenever we access the msg.

Affected products

• Linux kernel: from 5.13 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.90; from 6.13 before 6.18.32; from 6.19 before 7.0.9 — fixed in 6.1.175, 6.12.90, 6.18.32, 6.6.140, 7.0.9

How to fix

Upgrade to a fixed version: Linux kernel 6.1.175, 6.12.90, 6.18.32, 6.6.140. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0a78f2bac1424deb7c9d5e09c6b8e849d8e8b648
• https://git.kernel.org/stable/c/3c817a60b09eaab926e475088e750936efcc95ae
• https://git.kernel.org/stable/c/63b51e8a9d54317d31cc3856c1e12407070d5fc2
• https://git.kernel.org/stable/c/7688143ca62edeecacb3ba0a2cea129dbd262a18
• https://git.kernel.org/stable/c/88411caee8f576d6b5abf6531232fcc0ce756dc5
• https://git.kernel.org/stable/c/c72a8b4dc6d598e3831ef3abd9c6527dfbf4810e

Get alerted when CVE-2026-46199 or the next vulnerability affects your stack