vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-97425

drm/amdgpu: fix buffer overflow during vBIOS update

N/A
Published: September 24, 2026 at 04:03 PM UTC
Updated: October 30, 2026 at 01:21 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
5.198424f2ccb3c0dd43369288a47d15c980136c3bd5
Vendor states this is fixed in 29fef371331e87311822000535f491ffc3d7a64f (fixed)
Vendor states this is fixed in 4a1b0a4c5acbe96368d71157b264dcd917ba6c9e (fixed)
Vendor states this is fixed in 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5 (fixed)
Vendor states this is fixed in c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992 (fixed)
Vendor states this is fixed in 5.19 (unaffected)
Vendor states this is fixed in 6.1.191 (unaffected)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.6.158 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

Source: cverecord
https://git.kernel.org/stable/c/c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992
Source: cverecord
https://git.kernel.org/stable/c/29fef371331e87311822000535f491ffc3d7a64f
Source: cverecord
https://git.kernel.org/stable/c/6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5
Source: cverecord
https://git.kernel.org/stable/c/4a1b0a4c5acbe96368d71157b264dcd917ba6c9e
Source: cverecord
https://git.kernel.org/stable/c/bce28deb42b9e8d368648a002ffe3a6124c482aa

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card