CVE-2026-46230

EUVD-2026-32857
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

Check bounds against the end of the BO whenever we access the msg.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 2%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.13 ≤
𝑥
< 5.15.209
linuxlinux_kernel
5.16 ≤
𝑥
< 6.1.175
linuxlinux_kernel
6.2 ≤
𝑥
< 6.6.140
linuxlinux_kernel
6.7 ≤
𝑥
< 6.12.90
linuxlinux_kernel
6.13 ≤
𝑥
< 6.18.32
linuxlinux_kernel
6.19 ≤
𝑥
< 7.0.9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.176-1
fixed
bookworm (security)
6.1.176-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.259-1
fixed
forky
7.1.3-1
fixed
sid
7.1.3-1
fixed
trixie
6.12.94-1
fixed
trixie (security)
6.12.95-1
fixed
linux-6.1
bullseye (security)
6.1.176-1~deb11u1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
kernel
Azure Linux 3.0
0:6.6.141.1-1.azl3
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://git.kernel.org/stable/c/638d3e0b9eb77aa53fdd60e2b928761d16ba76fa
https://git.kernel.org/stable/c/638e48ee39d0f2af9336f917a6f5d6692dd64d93
https://git.kernel.org/stable/c/82c535eff05490c71153af57de9fe85502fcb5d5
https://git.kernel.org/stable/c/870c8738c3774336baedddd0240951d078a703b8
https://git.kernel.org/stable/c/b193019860d61e92da395eae2011f2f6716b182f
https://git.kernel.org/stable/c/e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7
https://git.kernel.org/stable/c/f55552adb100eb54a6e6dabff4fbdc8679bd3fa0