CVE-2026-93179

medium

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read Reject voltage objects whose usSize is smaller than the header or would advance the cursor past the table end, preventing an infinite loop or heap OOB read when the VBIOS supplies a malformed VoltageObjectInfo table.

References

https://git.kernel.org/stable/c/83c680de6d41d627c077dedb24f89d9e5be0e2a2

https://git.kernel.org/stable/c/5d3cc8e388464f485d0944b87b8f9426e637d082

https://git.kernel.org/stable/c/574af7c61f2bed37baa3b60669e428d24d2c9ae8

https://git.kernel.org/stable/c/203ffe648948ca3c2f55b21118945a7a6d0884aa

https://git.kernel.org/stable/c/0a6c9b3801903b6db91f3cbf148646b501dbded3

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-82287

Details

Source: Mitre, NVD

Published: 2026-09-17

Updated: 2026-10-21

Risk Information

CVSS v2

Base Score: 6.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00206