Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. (cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)
References8
- git.kernel.org/stable/c/25ee120f3803ad9e416ef9f76f4c3234cc4d645b
- git.kernel.org/stable/c/271a7da84a6262a09de549912dcf6a749d169cb6
- git.kernel.org/stable/c/5cbd8af02b0b9c8723fa30edcf6fccab5170af8d
- git.kernel.org/stable/c/60539d517e8439621532d8c01091ac049c596b4b
- git.kernel.org/stable/c/b7549e3f96c78921751c4b3e69af729662130d83
- git.kernel.org/stable/c/b8bb9ba3f101a1b0011f785a577a4a0a38371174
- git.kernel.org/stable/c/bc7397a033ac52f6d8c9bb6510d61694b2a3fce7
- git.kernel.org/stable/c/d058f7a6709441afe1784eecd8c0643dd84750bc
Metrics
- CVSS 3.1
-
7.8
HIGH
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 3 · as of 9 November 2026
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.