What’s Vulnerable › Vulnerabilities

CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-26 · updated 2026-10-16

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. (cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)

Affected products

• Linux kernel: 4.2 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/25ee120f3803ad9e416ef9f76f4c3234cc4d645b
• https://git.kernel.org/stable/c/271a7da84a6262a09de549912dcf6a749d169cb6
• https://git.kernel.org/stable/c/5cbd8af02b0b9c8723fa30edcf6fccab5170af8d
• https://git.kernel.org/stable/c/60539d517e8439621532d8c01091ac049c596b4b
• https://git.kernel.org/stable/c/b7549e3f96c78921751c4b3e69af729662130d83
• https://git.kernel.org/stable/c/b8bb9ba3f101a1b0011f785a577a4a0a38371174
• https://git.kernel.org/stable/c/bc7397a033ac52f6d8c9bb6510d61694b2a3fce7
• https://git.kernel.org/stable/c/d058f7a6709441afe1784eecd8c0643dd84750bc

Get alerted when CVE-2026-80540 or the next vulnerability affects your stack