Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-97428

drm/amdgpu: harden FRU PIA parsing with bounded helpers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with fru_pia_advance() and fru_pia_copy_field() helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on truncated or malformed FRU data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0dbf2c56262532fbd498f590c91c4085413b8829 to < 567d7c3f93f8d6bdc946a557a160ee1c42cfae91affected
  • 0dbf2c56262532fbd498f590c91c4085413b8829 to < 813311512505e95e4e3c898ff94b11886a15e494affected
  • 0dbf2c56262532fbd498f590c91c4085413b8829 to < 4396d74b0c7304946ee343a6611ac6dbc0bfbf78affected
  • 0dbf2c56262532fbd498f590c91c4085413b8829 to < c990c05eb6c74c98d1ff3acf67a19015312820b7affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References