What’s Vulnerable › Vulnerabilities

CVE-2026-97425: drm/amdgpu: fix buffer overflow during vBIOS update

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing.

Affected products

• Linux: 5.19 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/29fef371331e87311822000535f491ffc3d7a64f
• https://git.kernel.org/stable/c/4a1b0a4c5acbe96368d71157b264dcd917ba6c9e
• https://git.kernel.org/stable/c/6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5
• https://git.kernel.org/stable/c/bce28deb42b9e8d368648a002ffe3a6124c482aa
• https://git.kernel.org/stable/c/c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992

Get alerted when CVE-2026-97425 or the next vulnerability affects your stack