Back to CVE records
Not yet scoredPublished Sep 24, 2026
CVE-2026-97425drm/amdgpu: fix buffer overflow during vBIOS update
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 8424f2ccb3c0dd43369288a47d15c980136c3bd5 builds before 4a1b0a4c5acbe96368d71157b264dcd917ba6c9e; from 8424f2ccb3c0dd43369288a47d15c980136c3bd5 before c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992; 8424f2ccb3c0dd43369288a47d15c980136c3bd5 builds before 29fef371331e87311822000535f491ffc3d7a64f; from 8424f2ccb3c0dd43369288a47d15c980136c3bd5 before 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5 | CNA record |
References
- https://git.kernel.org/stable/c/4a1b0a4c5acbe96368d71157b264dcd917ba6c9e
- https://git.kernel.org/stable/c/c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992
- https://git.kernel.org/stable/c/29fef371331e87311822000535f491ffc3d7a64f
- https://git.kernel.org/stable/c/6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.