Skip to main content
VulnerabilityPublished Updated

CVE-2026-97425: Linux kernel · drm/amdgpu: fix buffer overflow during vBIOS update

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992 : patch Linux kernel soon.

Data as of 30 Oct 2026, 13:04 UTC

Severity
High

Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992, bce28deb42b9e8d368648a002ffe3a6124c482aa, 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 24 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 8424f2ccb3c0dd43369288a47d15c980136c3bd5, < c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992
Fixed in
  • c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992
LinuxLinuxAffected
  • ≥ 8424f2ccb3c0dd43369288a47d15c980136c3bd5, < bce28deb42b9e8d368648a002ffe3a6124c482aa
Fixed in
  • bce28deb42b9e8d368648a002ffe3a6124c482aa
LinuxLinuxAffected
  • ≥ 8424f2ccb3c0dd43369288a47d15c980136c3bd5, < 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5
Fixed in
  • 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5
LinuxLinuxAffected
  • ≥ 8424f2ccb3c0dd43369288a47d15c980136c3bd5, < 29fef371331e87311822000535f491ffc3d7a64f
Fixed in
  • 29fef371331e87311822000535f491ffc3d7a64f
LinuxLinuxAffected
  • ≥ 8424f2ccb3c0dd43369288a47d15c980136c3bd5, < 4a1b0a4c5acbe96368d71157b264dcd917ba6c9e
Fixed in
  • 4a1b0a4c5acbe96368d71157b264dcd917ba6c9e
LinuxLinuxAffected
  • =5.19
Fixed in–

AI-suggested

A fix is available in the Linux kernel versions identified by the provided commit hashes. Users should update their Linux kernel to a fixed version that includes these commits to remediate the vulnerability.

Description

A buffer overflow vulnerability in the Linux kernel's AMDGPU driver during vBIOS update has been fixed. The issue was addressed by clamping the buffer position to the maximum buffer size, preventing out-of-bounds memory access.

References

Community reviews

Loading reviews…