vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-80540

drm/amdgpu: Fix UVD decode image min size calculation

HIGH
7.8
CVSS Score
Published: August 26, 2026 at 02:37 PM UTC
Updated: October 16, 2026 at 08:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. (cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.2d38ceaf99ed015f2a0b9af3499791bd3a3daae21
Vendor states this is fixed in 25ee120f3803ad9e416ef9f76f4c3234cc4d645b (fixed)
Vendor states this is fixed in 271a7da84a6262a09de549912dcf6a749d169cb6 (fixed)
Vendor states this is fixed in 5cbd8af02b0b9c8723fa30edcf6fccab5170af8d (fixed)
Vendor states this is fixed in 60539d517e8439621532d8c01091ac049c596b4b (fixed)
Vendor states this is fixed in b7549e3f96c78921751c4b3e69af729662130d83 (fixed)
Vendor states this is fixed in b8bb9ba3f101a1b0011f785a577a4a0a38371174 (fixed)
Vendor states this is fixed in bc7397a033ac52f6d8c9bb6510d61694b2a3fce7 (fixed)
Vendor states this is fixed in d058f7a6709441afe1784eecd8c0643dd84750bc (fixed)
Vendor states this is fixed in 4.2 (unaffected)
Vendor states this is fixed in 5.10.266 (unaffected)
Vendor states this is fixed in 5.15.217 (unaffected)
Vendor states this is fixed in 6.1.184 (unaffected)
Vendor states this is fixed in 6.12.105 (unaffected)
Vendor states this is fixed in 6.18.46 (unaffected)
Vendor states this is fixed in 6.6.153 (unaffected)
Vendor states this is fixed in 7.1.10 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/bc7397a033ac52f6d8c9bb6510d61694b2a3fce7
Source: cverecord
https://git.kernel.org/stable/c/d058f7a6709441afe1784eecd8c0643dd84750bc
Source: cverecord
https://git.kernel.org/stable/c/b7549e3f96c78921751c4b3e69af729662130d83
Source: cverecord
https://git.kernel.org/stable/c/60539d517e8439621532d8c01091ac049c596b4b
Source: cverecord
https://git.kernel.org/stable/c/271a7da84a6262a09de549912dcf6a749d169cb6
Source: cverecord
https://git.kernel.org/stable/c/25ee120f3803ad9e416ef9f76f4c3234cc4d645b
Source: cverecord
https://git.kernel.org/stable/c/5cbd8af02b0b9c8723fa30edcf6fccab5170af8d
Source: cverecord
https://git.kernel.org/stable/c/b8bb9ba3f101a1b0011f785a577a4a0a38371174

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card