CVE-2026-53375

Awaiting Analysis Awaiting Analysis - Queue

AMDGPU VCE Partial Address Patching Vulnerability

Publication date: 2026-07-19

Last updated on: 2026-07-29

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-19

Last Modified

2026-07-29

Generated

2026-08-09

AI Q&A

2026-07-19

EPSS Evaluated

2026-08-08

NVD

CVE-2026-53375

EUVD

EUVD-2026-45448

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.2 (inc) to 6.6.140 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.32 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.90 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.9 (exc)
linux	linux_kernel	From 4.2 (inc) to 6.1.175 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the AMD GPU driver (amdgpu) related to the VCE (Video Core Engine) component. It occurs when only one part (either low or high address) of a memory address is valid, leading to an incorrect address being written to firmware. This could potentially cause system instability or unexpected behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver (amdgpu) and relates to incorrect address patching in the VCE component. Detection requires checking kernel logs for amdgpu-related errors or examining the kernel version for known vulnerable builds. No direct commands are provided in the context to detect this issue.

Impact Analysis

If exploited, this vulnerability could lead to system crashes, data corruption, or unauthorized access to sensitive information. Users running affected Linux kernel versions with AMD GPUs may experience graphical issues, application failures, or security breaches depending on the attacker's goals.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it pertains to a low-level graphics driver issue in the Linux kernel. Compliance impacts would depend on system-specific configurations and data handling practices rather than this specific vulnerability.

Mitigation Strategies

Update the Linux kernel to a patched version that resolves the amdgpu/VCE address patching issue. Monitor kernel logs for amdgpu-related errors after updating. If using a distribution kernel, apply vendor-provided updates immediately.

Hi! I’m here to help you understand CVE-2026-53375. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70