← All Advisories

Linux Kernel amdgpu Vega10 VBIOS Table Indices Lack Bounds Checks Across Nine Voltage Lookup Sites

Last refreshed2026-09-29

Status: NEW  |  Advisory ID: CVE-2026-93177

Key Details

CVECVE-2026-93177
CVSS Score / Version7.3 (High) / CVSS v3.1
Updated2026-09-18
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CVSS Proseattack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is low; availability impact is high.

What to Know

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup

vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc,

vddci and vddmem lookup tables without bounds checks across nine sites.

Return -EINVAL when any index is out of range. (NVD)

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-93177
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-93177