CVE-2026-80540

EUVD-2026-66455
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix UVD decode image min size calculation

This needs to use pitch instead of width. Also reject pitch
over 4096 to avoid overflow.

(cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 2.84%
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
vulnerable
bookworm (security)
vulnerable
bullseye
vulnerable
bullseye (security)
vulnerable
forky
vulnerable
sid
7.1.12-1
fixed
trixie
vulnerable
trixie (security)
6.12.107-1
fixed
Vulnerability Media Exposure
References
https://git.kernel.org/stable/c/25ee120f3803ad9e416ef9f76f4c3234cc4d645b
https://git.kernel.org/stable/c/271a7da84a6262a09de549912dcf6a749d169cb6
https://git.kernel.org/stable/c/5cbd8af02b0b9c8723fa30edcf6fccab5170af8d
https://git.kernel.org/stable/c/60539d517e8439621532d8c01091ac049c596b4b
https://git.kernel.org/stable/c/b7549e3f96c78921751c4b3e69af729662130d83
https://git.kernel.org/stable/c/b8bb9ba3f101a1b0011f785a577a4a0a38371174
https://git.kernel.org/stable/c/bc7397a033ac52f6d8c9bb6510d61694b2a3fce7
https://git.kernel.org/stable/c/d058f7a6709441afe1784eecd8c0643dd84750bc