CVE-2026-80540

HighCVSS 7.8/10Last modified Oct 16, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix UVD decode image min size calculation

This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow.

(cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < bc7397a033ac52f6d8c9bb6510d61694b2a3fce7; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < d058f7a6709441afe1784eecd8c0643dd84750bc; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < b7549e3f96c78921751c4b3e69af729662130d83; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 60539d517e8439621532d8c01091ac049c596b4b; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 271a7da84a6262a09de549912dcf6a749d169cb6; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 25ee120f3803ad9e416ef9f76f4c3234cc4d645b; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 5cbd8af02b0b9c8723fa30edcf6fccab5170af8d; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < b8bb9ba3f101a1b0011f785a577a4a0a38371174
LinuxLinux4.2

References

Timeline

Published
Aug 26, 2026
Last modified
Oct 16, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-805417.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEM_CREATE domain combinations AMDGPU_GEM_CREATE CVE-2026-80542In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblCVE-2026-80543In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both funcCVE-2026-805447.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The CVE-2026-805457.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrb_msgCVE-2026-805467.8In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow checks The xcrb_msg_CVE-2026-805478.8In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Implement a crw lock Unlike the channel_program struct,CVE-2026-805488.8In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Selectively expand io_mutex The io_mutex was defined toCVE-2026-805498.2In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Move cp cleanup out of not operational The fsm_notoper(CVE-2026-805507.9In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Fix out of bounds check on CCW array The routine ccwchaCVE-2026-805519.3In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure first IDAW remains constant The first IDAW in a CVE-2026-805528.8In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure index for read/write regions are within range Th
CVE-2026-80540: High severity, CVSS 7.8 | Vulnix