CVE-2026-46237
Published: June 2, 2026Last modified: June 2, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Avoid overflow on msg bound check As pointed out by SDL, the previous condition may be vulnerable to overflow. (cherry picked from commit db00257ac9e4a51eb2515aaea161a019f7125e10)
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 7.1 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | HIGH |
| Integrity impact | NONE |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Not affected (6.1.33-r0) |
| 25 LTS | linux-lts | Not affected (6.6.89-r0) | |
| Stream | linux-lts | Not affected (6.1.33-r0) |
References
- https://git.kernel.org/stable/c/016b64a0313ea5346cf526e30c8d3e66aca10175
- https://git.kernel.org/stable/c/1936310f68c54be961de38ac539cef9b543207cb
- https://git.kernel.org/stable/c/2e43b66fceacd6e982b94f2e3f8b34edd7463396
- https://git.kernel.org/stable/c/94a2b37399807fd2ca78dc1906986c4fbd72968e
- https://git.kernel.org/stable/c/95b0f6df8d7fad2eabf265d2c3d2538ef58e4465
- https://git.kernel.org/stable/c/e6e9faba8100628990cccd13f0f044a648c303cf
- https://git.kernel.org/stable/c/e8124121b79ab5d32fa8fbbd101f7208eca9cd7d