CVE-2026-68108

Received Received - Intake

Integer Overflow in AMDGPU VCE Driver

Publication date: 2026-08-10

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions (e.g. 65536×65536) cause 32-bit integer overflow, wrapping the calculated buffer size to 0. This bypasses validation and allows GPU firmware to perform out-of-bound memory access. The fix uses 64-bit arithmetic to detect overflow and rejects invalid dimensions before they reach the hardware. V2: remove redundant check V3: modify max height value V4: remove size64 (cherry picked from commit cbe408dba581755ad1279a487ec786d8927d778d)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-10-19

Generated

2026-11-08

AI Q&A

2026-08-10

EPSS Evaluated

2026-11-07

NVD

CVE-2026-68108

EUVD

EUVD-2026-55489

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	to 4 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves an integer overflow in the AMD GPU driver (amdgpu) VCE component. Malicious command streams with extremely large image dimensions (e.g., 65536x65536) cause a 32-bit integer to overflow, wrapping the calculated buffer size to zero. This bypasses validation checks and allows the GPU firmware to access memory outside intended bounds.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver (amdgpu) and involves malformed VCE command streams with oversized dimensions. Detection requires checking kernel logs for GPU-related errors or unusual memory access patterns. Commands like dmesg | grep amdgpu or journalctl -k | grep -i amdgpu may reveal issues. Ensure your kernel is updated to a patched version.

Impact Analysis

This flaw could allow attackers to execute arbitrary code or cause system crashes by exploiting the out-of-bounds memory access. It primarily affects systems using AMD GPUs with vulnerable Linux kernel versions, potentially leading to denial-of-service or privilege escalation.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves a memory access issue in the Linux kernel's AMD GPU driver, which could lead to out-of-bounds memory access but does not inherently impact data protection or privacy regulations.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for CVE-2026-68108. If using a distribution kernel, apply vendor patches immediately. Avoid using untrusted GPU command streams or applications until patched. Monitor kernel logs for suspicious activity related to amdgpu.

Hi! I’m here to help you understand CVE-2026-68108. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...