CVE-2026-97428
7.7
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: harden FRU PIA parsing with bounded helpers
Replace the open-coded TLV walk with fru_pia_advance() and fru_pia_copy_field() helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on truncated or malformed FRU data.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 0dbf2c56262532fbd498f590c91c4085413b8829 < 813311512505e95e4e3c898ff94b11886a15e494 | affected |
| Linux | Linux | 0dbf2c56262532fbd498f590c91c4085413b8829 < 4396d74b0c7304946ee343a6611ac6dbc0bfbf78 | affected |
| Linux | Linux | 0dbf2c56262532fbd498f590c91c4085413b8829 < c990c05eb6c74c98d1ff3acf67a19015312820b7 | affected |
| Linux | Linux | 6.2 | affected |
| Linux | Linux | 0 < 6.2 | unaffected |
| Linux | Linux | 6.12.111 <= 6.12.* | unaffected |
| Linux | Linux | 6.18.53 <= 6.18.* | unaffected |
| Linux | Linux | 7.2 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/813311512505e95e4e3c898ff94b11886a15e494
- https://git.kernel.org/stable/c/4396d74b0c7304946ee343a6611ac6dbc0bfbf78
- https://git.kernel.org/stable/c/c990c05eb6c74c98d1ff3acf67a19015312820b7
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.