vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-46230

drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

HIGH
7.1
CVSS Score
Published: May 28, 2026 at 09:40 AM UTC
Updated: October 19, 2026 at 08:18 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.1
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg Check bounds against the end of the BO whenever we access the msg.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
5.13 ≤ v < 5.15.2095.16 ≤ v < 6.1.1756.13 ≤ v < 6.18.326.19 ≤ v < 7.0.96.2 ≤ v < 6.6.1406.7 ≤ v < 6.12.905.1387cc7f9ebf7ce10f82250002d667ef3e93a79d44
Vendor states this is fixed in 638d3e0b9eb77aa53fdd60e2b928761d16ba76fa (fixed)
Vendor states this is fixed in 638e48ee39d0f2af9336f917a6f5d6692dd64d93 (fixed)
Vendor states this is fixed in 82c535eff05490c71153af57de9fe85502fcb5d5 (fixed)
Vendor states this is fixed in 870c8738c3774336baedddd0240951d078a703b8 (fixed)
Vendor states this is fixed in b193019860d61e92da395eae2011f2f6716b182f (fixed)
Vendor states this is fixed in e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7 (fixed)
Vendor states this is fixed in f55552adb100eb54a6e6dabff4fbdc8679bd3fa0 (fixed)
Vendor states this is fixed in 5.13 (unaffected)
Vendor states this is fixed in 5.15.209 (unaffected)
Vendor states this is fixed in 6.1.175 (unaffected)
Vendor states this is fixed in 6.12.90 (unaffected)
Vendor states this is fixed in 6.18.32 (unaffected)
Vendor states this is fixed in 6.6.140 (unaffected)
Vendor states this is fixed in 7.0.9 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

References (7)

Patch
Source: cverecord
https://git.kernel.org/stable/c/638d3e0b9eb77aa53fdd60e2b928761d16ba76fa
Patch
Source: cverecord
https://git.kernel.org/stable/c/870c8738c3774336baedddd0240951d078a703b8
Patch
Source: cverecord
https://git.kernel.org/stable/c/638e48ee39d0f2af9336f917a6f5d6692dd64d93
Patch
Source: cverecord
https://git.kernel.org/stable/c/e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7
Patch
Source: cverecord
https://git.kernel.org/stable/c/b193019860d61e92da395eae2011f2f6716b182f
Patch
Source: cverecord
https://git.kernel.org/stable/c/f55552adb100eb54a6e6dabff4fbdc8679bd3fa0
Patch
Source: cverecord
https://git.kernel.org/stable/c/82c535eff05490c71153af57de9fe85502fcb5d5

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.1HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-125

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card