CVE-2026-80908 PUBLISHED

drm/amdgpu: Reject UVD message with dimensions above 4096

Assigner: Linux
Reserved: 26.08.2026 Published: 04.09.2026 Updated: 04.09.2026

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Reject UVD message with dimensions above 4096

Fixes potential overflow in DPB size calculations.

(cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10)

Vendor	Linux
Product	Linux
Versions	Default: unaffected affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 8bae80eaed00e7ae28412a3cdf590f4beca72294 (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 9adc5e25f31d7ee7dfc18814499b6e3a6d402904 (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 382bef781ff441ce8055bdada57b8c291dc0fd30 (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 8435d41afcf2bc31ecee213ef651c12bd1a16d38 (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to f7af372d3b892b95dd3cd1c6acf29daa39ba076d (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 339deb76ee4859ea973e435c9a9a4a4fefc29338 (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 17fbb996c05f2190e0fa20927ca0b9804d481b02 (excl.) affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 8c9aebcdd9f46f7a14b98d6ab18574b7a48fbb08 (excl.) affected from 0 to 5.10.266 (excl.) affected from 0 to 5.15.217 (excl.) affected from 0 to 6.1.184 (excl.) affected from 0 to 6.6.153 (excl.) affected from 0 to 6.12.105 (excl.) affected from 0 to 6.18.46 (excl.) affected from 0 to 7.1.10 (excl.)

Vendor	Linux
Product	Linux
Versions	Default: affected unaffected from 5.10.266 to 5.10.* (incl.) unaffected from 5.15.217 to 5.15.* (incl.) unaffected from 6.1.184 to 6.1.* (incl.) unaffected from 6.6.153 to 6.6.* (incl.) unaffected from 6.12.105 to 6.12.* (incl.) unaffected from 6.18.46 to 6.18.* (incl.) unaffected from 7.1.10 to 7.1.* (incl.) unaffected from 7.2 to * (incl.)