CVE-2026-80907 PUBLISHED

drm/amdgpu: Fix UVD dpb min size calculation for H264

Assigner: Linux
Reserved: 26.08.2026 Published: 04.09.2026 Updated: 04.09.2026

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix UVD dpb min size calculation for H264

This should use actual number of references from the decode message, instead of maximum derived from level.

(cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856)

Vendor	Linux
Product	Linux
Versions	Default: unaffected affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to fa96c24485942e277483cc70d9551d9e0111d7c5 (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 33f4ef585368fe93523dca1e5440e006f6e5146e (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 38914cb2c6afb5fe00241ea3438e655822196378 (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to ff4361816b6ba4bd29b548b17d993056a1ae2502 (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 21a8084cd76223a13493237e04d45f5226d7cee6 (excl.) affected from 0 to 6.6.153 (excl.) affected from 0 to 6.12.105 (excl.) affected from 0 to 6.18.46 (excl.) affected from 0 to 7.1.10 (excl.)

Vendor	Linux
Product	Linux
Versions	Default: affected unaffected from 6.6.153 to 6.6.* (incl.) unaffected from 6.12.105 to 6.12.* (incl.) unaffected from 6.18.46 to 6.18.* (incl.) unaffected from 7.1.10 to 7.1.* (incl.) unaffected from 7.2 to * (incl.)