Not yet scoredPublished Sep 24, 2026

CVE-2026-97425drm/amdgpu: fix buffer overflow during vBIOS update

Updated under an hour ago (Oct 27, 2026, 6:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 3, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	8424f2ccb3c0dd43369288a47d15c980136c3bd5 builds before 4a1b0a4c5acbe96368d71157b264dcd917ba6c9e; from 8424f2ccb3c0dd43369288a47d15c980136c3bd5 before c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992; 8424f2ccb3c0dd43369288a47d15c980136c3bd5 builds before 29fef371331e87311822000535f491ffc3d7a64f; from 8424f2ccb3c0dd43369288a47d15c980136c3bd5 before 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5	CNA record

References

References

https://git.kernel.org/stable/c/4a1b0a4c5acbe96368d71157b264dcd917ba6c9e
https://git.kernel.org/stable/c/c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992
https://git.kernel.org/stable/c/29fef371331e87311822000535f491ffc3d7a64f
https://git.kernel.org/stable/c/6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.