What’s Vulnerable › Vulnerabilities

CVE-2026-46230: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-28 · updated 2026-10-19
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg Check bounds against the end of the BO whenever we access the msg.

Affected products

• Linux kernel: from 5.13 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.90; from 6.13 before 6.18.32; from 6.19 before 7.0.9 — fixed in 5.15.209, 6.1.175, 6.12.90, 6.18.32, 6.6.140, 7.0.9

How to fix

Upgrade to a fixed version: Linux kernel 5.15.209, 6.1.175, 6.12.90, 6.18.32. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/638d3e0b9eb77aa53fdd60e2b928761d16ba76fa
• https://git.kernel.org/stable/c/638e48ee39d0f2af9336f917a6f5d6692dd64d93
• https://git.kernel.org/stable/c/82c535eff05490c71153af57de9fe85502fcb5d5
• https://git.kernel.org/stable/c/870c8738c3774336baedddd0240951d078a703b8
• https://git.kernel.org/stable/c/b193019860d61e92da395eae2011f2f6716b182f
• https://git.kernel.org/stable/c/e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7
• https://git.kernel.org/stable/c/f55552adb100eb54a6e6dabff4fbdc8679bd3fa0

Get alerted when CVE-2026-46230 or the next vulnerability affects your stack