CVE-2026-64516

Received Received - Intake

AMDGPU VCE Firmware Size and Offset Validation Flaw

Publication date: 2026-07-25

Last updated on: 2026-07-27

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset, but it was not calculated into the VCPU BO size. Subtract this from the FW size to make sure there is no out of bounds access. Make sure the stack and data offsets are aligned to the 32K TLB size. Check that the FW microcode actually fits in the space that is reserved for it. (cherry picked from commit c16fe59f622a080fc457a57b3e8f14c780699449)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-25

Last Modified

2026-07-27

Generated

2026-08-14

AI Q&A

2026-07-25

EPSS Evaluated

2026-08-13

NVD

CVE-2026-64516

EUVD

EUVD-2026-48860

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves incorrect calculation of the Video Core Engine (VCE) firmware size and offsets in the VCPU buffer object (BO). The firmware offset was not included in the BO size, risking out-of-bounds memory access. Additionally, stack and data offsets were not aligned to the 32K TLB size, and there was no check to ensure the firmware fits in the reserved space.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver (amdgpu) and relates to incorrect VCE firmware size and offset calculations. Detection requires checking kernel logs for AMD GPU-related errors or inspecting the kernel version for affected releases. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could allow an attacker to cause memory corruption or execute arbitrary code in the Linux kernel, potentially leading to system crashes, privilege escalation, or unauthorized access. Systems using affected AMD GPU drivers with VCE firmware may be vulnerable.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is specific to the Linux kernel's AMD GPU driver (amdgpu) and involves firmware size miscalculations. Compliance risks would depend on system configuration and usage, not the vulnerability itself.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this AMD GPU VCE firmware issue. Monitor kernel logs for AMD GPU errors after updating. If using a distribution kernel, apply vendor security updates immediately.

Hi! I’m here to help you understand CVE-2026-64516. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70