CVE-2026-80907
Received Received - Intake

AMDGPU UVD H264 dpb size calculation vulnerability

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H264 This should use actual number of references from the decode message, instead of maximum derived from level. (cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80907
EUVD
EUVD-2026-71666

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a miscalculation in the UVD (Unified Video Decoder) dpb (Decoded Picture Buffer) minimum size for H264 video decoding. The issue arises because the code incorrectly uses the maximum number of references derived from the video level instead of the actual number of references specified in the decode message.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver (amdgpu) and relates to UVD dpb min size calculation for H264. Detection requires checking kernel logs or driver-specific logs for errors related to UVD (Unified Video Decoder) operations. Commands like dmesg | grep amdgpu or journalctl -k | grep amdgpu may help identify issues.

Impact Analysis

This vulnerability could lead to incorrect memory allocation for video decoding buffers, potentially causing system instability, crashes, or unexpected behavior during video playback or processing. It may affect applications relying on AMD GPU hardware acceleration for H264 video decoding.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. If using a distribution kernel, apply available updates via your package manager (e.g., apt upgrade, yum update). For custom kernels, recompile with the patch applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80907. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart