CVE-2026-93177

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup

vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc, vddci and vddmem lookup tables without bounds checks across nine sites. Return -EINVAL when any index is out of range.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf83a9991648bb4023a53104db699e99305890d51 < 206e478810d6af50b25d8da72e3af8d55a014365affected
LinuxLinuxf83a9991648bb4023a53104db699e99305890d51 < 25dedc13ceb9b6109c79c92a726ca4ca017c9eaaaffected
LinuxLinuxf83a9991648bb4023a53104db699e99305890d51 < ae25c92d91f2cb90ede2b0eb0f58efa82ccc718baffected
LinuxLinuxf83a9991648bb4023a53104db699e99305890d51 < b349dcf061a6dc8c6cef9a10530331ef2ff66c72affected
LinuxLinuxf83a9991648bb4023a53104db699e99305890d51 < dfe89f1a0c7f40ef858b93881198f9728df956cfaffected
LinuxLinuxf83a9991648bb4023a53104db699e99305890d51 < 46d27e56dbd6345b9c7b62b67ec57407bf3bf29aaffected
LinuxLinuxf83a9991648bb4023a53104db699e99305890d51 < 06aef6dcc1d52da5112cbcde39c062e493247ab5affected
LinuxLinuxf83a9991648bb4023a53104db699e99305890d51 < 6fa33f594e46e775a94097f71b486d7b006b6917affected
LinuxLinux4.12affected
LinuxLinux0 < 4.12unaffected
LinuxLinux5.10.270 <= 5.10.*unaffected
LinuxLinux5.15.221 <= 5.15.*unaffected
LinuxLinux6.1.188 <= 6.1.*unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.52 <= 6.18.*unaffected
LinuxLinux7.2.6 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References