8.8

CVE-2026-68107

drm/amdgpu/vcn4: avoid rereading IB param length

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn4: avoid rereading IB param length

Reuse the parameter length returned by
vcn_v4_0_enc_find_ib_param() instead of rereading it from
the IB.

This avoids a potential TOCTOU issue if the IB contents
change between reads.

(cherry picked from commit dbb02b4755f8c1f3773263f2d779872c1c0c073a)
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version cfdde9197ecd957281507be99af172671a57755c
Version < bbbe6a2a8d8dc87243438d3ffea2083b52d882d9
Status affected
Version 6dc4eddeb7e6cca7e1ab32cafbda79d06e652d84
Version < ff6aa542d91d76a185f69bd1997b94a560ff5f6b
Status affected
Version 2b10cb58d7a3fd621ec9b2ba765a092e562ef998
Version < bd868c077f67589ed2a714307ceaade5f246e302
Status affected
Version 2b10cb58d7a3fd621ec9b2ba765a092e562ef998
Version < c309626bf91fa0a0b583575654e6e14e81f818a3
Status affected
Version 2b10cb58d7a3fd621ec9b2ba765a092e562ef998
Version < 3b4082fabc67c9780b06eb959e59dd92fa79c0f0
Status affected
Version b1dc92f55b22a80ded8f0263c9ef4ba902303895
Status affected
Version 6.6.107
Version < 6.6.148
Status affected
Version 6.12.48
Version < 6.12.101
Status affected
Version 6.16.8
Version < 6.17
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.17
Status affected
Version 0
Version < 6.17
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.029
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/bbbe6a2a8d8dc87243438d3ffea2083b52d882d9
https://git.kernel.org/stable/c/ff6aa542d91d76a185f69bd1997b94a560ff5f6b
https://git.kernel.org/stable/c/bd868c077f67589ed2a714307ceaade5f246e302
https://git.kernel.org/stable/c/c309626bf91fa0a0b583575654e6e14e81f818a3
https://git.kernel.org/stable/c/3b4082fabc67c9780b06eb959e59dd92fa79c0f0