What’s Vulnerable › Vulnerabilities

CVE-2026-46204: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-28 · updated 2026-10-30
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB Rewrite the IB parsing to use amdgpu_ib_get_value() which handles the bounds checks.

Affected products

• Linux kernel: from 6.0 before 6.6.140; from 6.7 before 6.12.90; from 6.13 before 6.18.32; from 6.19 before 7.0.9 — fixed in 6.6.140, 6.12.90, 6.18.32, 7.0.9
• Linux: 6.0 — fixed in 7.1

How to fix

Upgrade to a fixed version: Linux kernel 6.6.140, 6.12.90, 6.18.32, 7.0.9; Linux 7.1. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1dc005775fb5b3f86464406452b17364f85581d3
• https://git.kernel.org/stable/c/2444eb0ec8283f4a3845eb7febad378476e1ba3c
• https://git.kernel.org/stable/c/5c3e8ebad0c9e2354ddfa8f2148dc4f70a3b4bd1
• https://git.kernel.org/stable/c/92724364702fd12d99f441a4af11d9c8bcd52217
• https://git.kernel.org/stable/c/a6d5563ba1f03a049561cd347574613167294e8d
• https://git.kernel.org/stable/c/d0802a8877d730260d4af4dd4e0b6cde7e0e593f

Get alerted when CVE-2026-46204 or the next vulnerability affects your stack