What’s Vulnerable › Vulnerabilities

CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-19 · updated 2026-10-19
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW.

Affected products

• Linux kernel: from 4.2 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.90; from 6.13 before 6.18.32; from 6.19 before 7.0.9 — fixed in 6.1.175, 6.12.90, 6.18.32, 6.6.140, 7.0.9

How to fix

Upgrade to a fixed version: Linux kernel 6.1.175, 6.12.90, 6.18.32, 6.6.140. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0ee17150763962671f43a62ddf8f6ea1feaff438
• https://git.kernel.org/stable/c/2d66d1f5d8c0434e9a5ad21cc6eaf3a5e32141d5
• https://git.kernel.org/stable/c/944db9cfa5373f67eb94621d4c2eee572c05fa3f
• https://git.kernel.org/stable/c/b3d1a0a45c4aec484fa2a5b060b611e3d3064470
• https://git.kernel.org/stable/c/de2a02cc28d6d5d37db07d00a9a684c754a5fd74
• https://git.kernel.org/stable/c/ea2c554e700b86a04534b4c24ece5844e8c5f07e

Get alerted when CVE-2026-53375 or the next vulnerability affects your stack