CVE-2026-80908

Not scored yetLast modified Sep 7, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Reject UVD message with dimensions above 4096

Fixes potential overflow in DPB size calculations.

(cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10)

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 8bae80eaed00e7ae28412a3cdf590f4beca72294; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 9adc5e25f31d7ee7dfc18814499b6e3a6d402904; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 382bef781ff441ce8055bdada57b8c291dc0fd30; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 8435d41afcf2bc31ecee213ef651c12bd1a16d38; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < f7af372d3b892b95dd3cd1c6acf29daa39ba076d; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 339deb76ee4859ea973e435c9a9a4a4fefc29338; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 17fbb996c05f2190e0fa20927ca0b9804d481b02; >= d38ceaf99ed015f2a0b9af3499791bd3a3daae21, < 8c9aebcdd9f46f7a14b98d6ab18574b7a48fbb08
LinuxLinux4.2

References

Timeline

Published
Sep 4, 2026
Last modified
Sep 7, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80909In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same cCVE-2026-80919.8Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox CVE-2026-80910In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses EAR SPKR PA CVE-2026-80911In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() IfCVE-2026-80912In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in security_get_classes() secCVE-2026-80913In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined p_bools.nprim comesCVE-2026-809148.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_readyCVE-2026-80915In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to systCVE-2026-80916In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPT_RT syzbot is CVE-2026-80917In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems CVE-2026-80918In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetch_CVE-2026-80919In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format
CVE-2026-80908: Unscored | Vulnix