7.7

CVE-2026-97428

drm/amdgpu: harden FRU PIA parsing with bounded helpers

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: harden FRU PIA parsing with bounded helpers

Replace the open-coded TLV walk with fru_pia_advance()
and fru_pia_copy_field() helpers that bound every read
by the actual EEPROM data length, preventing out-of-bounds
reads on truncated or malformed FRU data.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 0dbf2c56262532fbd498f590c91c4085413b8829
Version < 813311512505e95e4e3c898ff94b11886a15e494
Status affected
Version 0dbf2c56262532fbd498f590c91c4085413b8829
Version < 4396d74b0c7304946ee343a6611ac6dbc0bfbf78
Status affected
Version 0dbf2c56262532fbd498f590c91c4085413b8829
Version < c990c05eb6c74c98d1ff3acf67a19015312820b7
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.2
Status affected
Version 0
Version < 6.2
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.028
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.7 2.5 5.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/813311512505e95e4e3c898ff94b11886a15e494
https://git.kernel.org/stable/c/4396d74b0c7304946ee343a6611ac6dbc0bfbf78
https://git.kernel.org/stable/c/c990c05eb6c74c98d1ff3acf67a19015312820b7