CVE-2026-68106
Received Received - Intake

Division by Zero in AMDGPU UVD Decode Path

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, width_in_mb or height_in_mb becomes 0, leading to fs_in_mb being 0. This causes a division by zero when calculating num_dpb_buffer in H264 and H264 Perf decode paths. Add validation to reject frames with width < 16 or height < 16 before performing any calculations that depend on these values. V2: Format change - move up all vaiable definitions. V3: Use warn_once to avoid spam. (cherry picked from commit 3e41d26c70b0a459d041cc19482a226c4b7423cb)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68106
EUVD
EUVD-2026-55487

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the AMD GPU driver where invalid video decode dimensions (width or height less than 16) cause a division by zero error during H264 video decoding. The issue occurs because certain calculations depend on these dimensions being at least 16 pixels.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver and can be detected by checking kernel logs for division by zero errors related to AMD GPU UVD (Unified Video Decoder) operations. Monitor dmesg or journalctl for errors like 'division by zero' in amdgpu or drm modules.

Impact Analysis

This vulnerability could cause system crashes or instability when processing certain video files with the AMD GPU driver. It may lead to application freezes or kernel panics during video playback or decoding tasks.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this vulnerability. Ensure your system uses a kernel version where the AMD GPU driver validates frame dimensions before processing.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68106. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart