CVE-2026-46218 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_value The uvd/vce/vcn code accesses the IB at predefined offsets without checking that the IB is large enough. Check the bounds here. The caller is responsible for making sure it can handle arbitrary return values. Also make the idx a uint32_t to prevent overflows causing the condition to fail.
A vulnerability in the Linux kernel's AMD GPU driver has been addressed, which involved improper bounds checking when accessing the input buffer (IB) at specific offsets. The issue arose because the UVD, VCE, and VCN components did not verify whether the IB was sufficiently large, potentially leading to buffer overflows. The vulnerability has been fixed by adding appropriate bounds checks and modifying the index type to uint32_t to prevent overflow-related issues. This vulnerability affects the Linux kernel stable tree.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The patched version can be downloaded from the Linux kernel stable Git repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0fb5cb556b249b2b64c0f818136c4c3e838ef53f | kernel.org | Patch |
| https://git.kernel.org/stable/c/5da6c6430be0acb25b4242bce0323fc514d4e3cf | kernel.org | Patch |
| https://git.kernel.org/stable/c/66085e206431ef88ce36f53c1f53d570790ccc9e | kernel.org | Patch |
| https://git.kernel.org/stable/c/a853178d23e774adfe3a35073c375b04b3b20f7d | kernel.org | Patch |
| https://git.kernel.org/stable/c/ee26fcf7c5cf131f0b6a732faa27d79ec61b8ec7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fec8b11b55e53ff51a741e56894fe331a516f5c6 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.2, < 6.1.175 >= 6.2, < 6.6.140 >= 6.7, < 6.12.90 >= 6.13, < 6.18.32 >= 6.19, < 7.0.9 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 10, 2026 | Initial Analysis | [email protected] |
| Jun 1, 2026 | CVE Modified | kernel.org |
| May 30, 2026 | CVE Modified | kernel.org |
| May 28, 2026 | New CVE Received | kernel.org |