Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-93179

drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read Reject voltage objects whose usSize is smaller than the header or would advance the cursor past the table end, preventing an infinite loop or heap OOB read when the VBIOS supplies a malformed VoltageObjectInfo table.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c82baa28184356a75c0157129f88af42b2e7b695 to < ed84504713e8357f33693f638fda68fc98f0c9d2affected
  • c82baa28184356a75c0157129f88af42b2e7b695 to < 86644d37d2b388854b2cfd4d4f57b3d84a57154baffected
  • c82baa28184356a75c0157129f88af42b2e7b695 to < e5b3c485ef911358752a3abbf3705d05d0eafd7aaffected
  • c82baa28184356a75c0157129f88af42b2e7b695 to < 574af7c61f2bed37baa3b60669e428d24d2c9ae8affected
  • c82baa28184356a75c0157129f88af42b2e7b695 to < 203ffe648948ca3c2f55b21118945a7a6d0884aaaffected
  • c82baa28184356a75c0157129f88af42b2e7b695 to < 0a6c9b3801903b6db91f3cbf148646b501dbded3affected
  • c82baa28184356a75c0157129f88af42b2e7b695 to < 83c680de6d41d627c077dedb24f89d9e5be0e2a2affected
  • c82baa28184356a75c0157129f88af42b2e7b695 to < 5d3cc8e388464f485d0944b87b8f9426e637d082affected

Linux Linux

Default version status: affected

  • 4.5affected
  • 0 to < 4.5unaffected
  • 5.10.273 to ≤ 5.10.*unaffected
  • 5.15.224 to ≤ 5.15.*unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.113 to ≤ 6.12.*unaffected
  • 6.18.56 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References