Back to CVE records
Not yet scoredPublished Sep 4, 2026
CVE-2026-80908drm/amdgpu: Reject UVD message with dimensions above 4096
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. (cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 7, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 8bae80eaed00e7ae28412a3cdf590f4beca72294; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 9adc5e25f31d7ee7dfc18814499b6e3a6d402904; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 382bef781ff441ce8055bdada57b8c291dc0fd30; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 8435d41afcf2bc31ecee213ef651c12bd1a16d38; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before f7af372d3b892b95dd3cd1c6acf29daa39ba076d; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 339deb76ee4859ea973e435c9a9a4a4fefc29338; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 17fbb996c05f2190e0fa20927ca0b9804d481b02; from d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 8c9aebcdd9f46f7a14b98d6ab18574b7a48fbb08 | CNA record |
References
- https://git.kernel.org/stable/c/8bae80eaed00e7ae28412a3cdf590f4beca72294
- https://git.kernel.org/stable/c/9adc5e25f31d7ee7dfc18814499b6e3a6d402904
- https://git.kernel.org/stable/c/382bef781ff441ce8055bdada57b8c291dc0fd30
- https://git.kernel.org/stable/c/8435d41afcf2bc31ecee213ef651c12bd1a16d38
- https://git.kernel.org/stable/c/f7af372d3b892b95dd3cd1c6acf29daa39ba076d
- https://git.kernel.org/stable/c/339deb76ee4859ea973e435c9a9a4a4fefc29338
- https://git.kernel.org/stable/c/17fbb996c05f2190e0fa20927ca0b9804d481b02
- https://git.kernel.org/stable/c/8c9aebcdd9f46f7a14b98d6ab18574b7a48fbb08
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.