vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-53375

drm/amdgpu/vce: Prevent partial address patches

HIGH
8.8
CVSS Score
Published: July 19, 2026 at 10:01 AM UTC
Updated: October 19, 2026 at 08:19 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
4.2 ≤ v < 6.1.1756.13 ≤ v < 6.18.326.19 ≤ v < 7.0.96.2 ≤ v < 6.6.1406.7 ≤ v < 6.12.904.2d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Vendor states this is fixed in 0ee17150763962671f43a62ddf8f6ea1feaff438 (fixed)
Vendor states this is fixed in 2d66d1f5d8c0434e9a5ad21cc6eaf3a5e32141d5 (fixed)
Vendor states this is fixed in 944db9cfa5373f67eb94621d4c2eee572c05fa3f (fixed)
Vendor states this is fixed in b3d1a0a45c4aec484fa2a5b060b611e3d3064470 (fixed)
Vendor states this is fixed in de2a02cc28d6d5d37db07d00a9a684c754a5fd74 (fixed)
Vendor states this is fixed in ea2c554e700b86a04534b4c24ece5844e8c5f07e (fixed)
Vendor states this is fixed in 4.2 (unaffected)
Vendor states this is fixed in 6.1.175 (unaffected)
Vendor states this is fixed in 6.12.90 (unaffected)
Vendor states this is fixed in 6.18.32 (unaffected)
Vendor states this is fixed in 6.6.140 (unaffected)
Vendor states this is fixed in 7.0.9 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

References (6)

Patch
Source: cverecord
https://git.kernel.org/stable/c/2d66d1f5d8c0434e9a5ad21cc6eaf3a5e32141d5
Patch
Source: cverecord
https://git.kernel.org/stable/c/944db9cfa5373f67eb94621d4c2eee572c05fa3f
Patch
Source: cverecord
https://git.kernel.org/stable/c/0ee17150763962671f43a62ddf8f6ea1feaff438
Patch
Source: cverecord
https://git.kernel.org/stable/c/b3d1a0a45c4aec484fa2a5b060b611e3d3064470
Patch
Source: cverecord
https://git.kernel.org/stable/c/ea2c554e700b86a04534b4c24ece5844e8c5f07e
Patch
Source: cverecord
https://git.kernel.org/stable/c/de2a02cc28d6d5d37db07d00a9a684c754a5fd74

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfoCWE-125

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card