High 7.1Published May 28, 2026

CVE-2026-46218drm/amdgpu: Add bounds checking to ib_{get,set}_value

Updated under an hour ago (Oct 27, 2026, 4:50 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_value The uvd/vce/vcn code accesses the IB at predefined offsets without checking that the IB is large enough. Check the bounds here. The caller is responsible for making sure it can handle arbitrary return values. Also make the idx a uint32_t to prevent overflows causing the condition to fail.

CVSS: 7.1 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 5da6c6430be0acb25b4242bce0323fc514d4e3cf; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 0fb5cb556b249b2b64c0f818136c4c3e838ef53f; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before a853178d23e774adfe3a35073c375b04b3b20f7d; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before fec8b11b55e53ff51a741e56894fe331a516f5c6; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before ee26fcf7c5cf131f0b6a732faa27d79ec61b8ec7; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 66085e206431ef88ce36f53c1f53d570790ccc9e	CNA record
linux linux_kernel linux:linux_kernel	from 4.2 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.90; from 6.13 before 6.18.32; from 6.19 before 7.0.9	NVD

References

References

https://git.kernel.org/stable/c/5da6c6430be0acb25b4242bce0323fc514d4e3cf	patch
https://git.kernel.org/stable/c/0fb5cb556b249b2b64c0f818136c4c3e838ef53f	patch
https://git.kernel.org/stable/c/a853178d23e774adfe3a35073c375b04b3b20f7d	patch
https://git.kernel.org/stable/c/fec8b11b55e53ff51a741e56894fe331a516f5c6	patch
https://git.kernel.org/stable/c/ee26fcf7c5cf131f0b6a732faa27d79ec61b8ec7	patch
https://git.kernel.org/stable/c/66085e206431ef88ce36f53c1f53d570790ccc9e	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.