CVE-2026-93177drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc, vddci and vddmem lookup tables without bounds checks across nine sites. Return -EINVAL when any index is out of range.
- CVSS
- 7.3 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 18, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f83a9991648bb4023a53104db699e99305890d51 before 206e478810d6af50b25d8da72e3af8d55a014365; from f83a9991648bb4023a53104db699e99305890d51 before 25dedc13ceb9b6109c79c92a726ca4ca017c9eaa; from f83a9991648bb4023a53104db699e99305890d51 before ae25c92d91f2cb90ede2b0eb0f58efa82ccc718b; from f83a9991648bb4023a53104db699e99305890d51 before b349dcf061a6dc8c6cef9a10530331ef2ff66c72; from f83a9991648bb4023a53104db699e99305890d51 before dfe89f1a0c7f40ef858b93881198f9728df956cf; from f83a9991648bb4023a53104db699e99305890d51 before 46d27e56dbd6345b9c7b62b67ec57407bf3bf29a; from f83a9991648bb4023a53104db699e99305890d51 before 06aef6dcc1d52da5112cbcde39c062e493247ab5; from f83a9991648bb4023a53104db699e99305890d51 before 6fa33f594e46e775a94097f71b486d7b006b6917 | CNA record |
References
- https://git.kernel.org/stable/c/206e478810d6af50b25d8da72e3af8d55a014365
- https://git.kernel.org/stable/c/25dedc13ceb9b6109c79c92a726ca4ca017c9eaa
- https://git.kernel.org/stable/c/ae25c92d91f2cb90ede2b0eb0f58efa82ccc718b
- https://git.kernel.org/stable/c/b349dcf061a6dc8c6cef9a10530331ef2ff66c72
- https://git.kernel.org/stable/c/dfe89f1a0c7f40ef858b93881198f9728df956cf
- https://git.kernel.org/stable/c/46d27e56dbd6345b9c7b62b67ec57407bf3bf29a
- https://git.kernel.org/stable/c/06aef6dcc1d52da5112cbcde39c062e493247ab5
- https://git.kernel.org/stable/c/6fa33f594e46e775a94097f71b486d7b006b6917
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.