CVE-2026-46230
Out-of-Bounds Read in AMDGPU VCN3 Driver
Publication date: 2026-05-28
Last updated on: 2026-05-28
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux_kernel | linux_kernel | * |
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel, specifically in the drm/amdgpu/vcn3 component. It involves out-of-bounds (OOB) reads when parsing a decode message (dec msg). The issue arises because the code did not properly check the bounds against the end of the buffer object (BO) when accessing the message, which could lead to reading memory beyond the intended limits.
How can this vulnerability impact me? :
An out-of-bounds read vulnerability can potentially lead to information disclosure or cause the system to behave unexpectedly, such as crashes or data corruption. In this case, improper bounds checking in the Linux kernel's AMD GPU driver could allow an attacker to read memory beyond the intended buffer, which might expose sensitive information or destabilize the system.