Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-68107

drm/amdgpu/vcn4: avoid rereading IB param length

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcn_v4_0_enc_find_ib_param() instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. (cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cfdde9197ecd957281507be99af172671a57755c to < bbbe6a2a8d8dc87243438d3ffea2083b52d882d9affected
  • 6dc4eddeb7e6cca7e1ab32cafbda79d06e652d84 to < ff6aa542d91d76a185f69bd1997b94a560ff5f6baffected
  • 2b10cb58d7a3fd621ec9b2ba765a092e562ef998 to < bd868c077f67589ed2a714307ceaade5f246e302affected
  • 2b10cb58d7a3fd621ec9b2ba765a092e562ef998 to < c309626bf91fa0a0b583575654e6e14e81f818a3affected
  • 2b10cb58d7a3fd621ec9b2ba765a092e562ef998 to < 3b4082fabc67c9780b06eb959e59dd92fa79c0f0affected
  • d19dd814b5b7dd9bfc288308a69cb29528f041fdaffected
  • b1dc92f55b22a80ded8f0263c9ef4ba902303895affected
  • 6.6.107 to < 6.6.148affected
  • 6.12.48 to < 6.12.101affected
  • 6.1.191 to < 6.2affected
  • 6.16.8 to < 6.17affected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 6.6.148 to ≤ 6.6.*unaffected
  • 6.12.101 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References