Lucene search
+L

53 matches found

RedHat Linux
RedHat Linux
•added 2026/09/25 8:24 a.m.•3 views

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn4 component. This vulnerability allows an attacker to trigger an out-of-bounds OOB read when parsing decoder messages due to insufficient bounds checking. This could lead to information disclosure, potentially revealing sensitive data from memo...

7.1CVSS6.8AI score0.00167EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/25 8:24 a.m.•3 views

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver, specifically within the drm/amdgpu/vcn4 component. This vulnerability allows for an out-of-bounds read when processing an Instruction Buffer IB. An attacker could potentially exploit this to read sensitive information...

7.1CVSS6.8AI score0.00166EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/24 5:10 p.m.•6 views

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver, specifically within the drm/amdgpu/vcn4 component. This vulnerability allows for an out-of-bounds read when processing an Instruction Buffer IB. An attacker could potentially exploit this to read sensitive information...

7.1CVSS6.8AI score0.00166EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/24 5:10 p.m.•4 views

kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

A flaw was found in the Linux kernel's drm/amdgpu/vcn4 component. This vulnerability allows an attacker to trigger an out-of-bounds OOB read when parsing decoder messages due to insufficient bounds checking. This could lead to information disclosure, potentially revealing sensitive data from memo...

7.1CVSS6.8AI score0.00167EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/08/13 4:24 p.m.•9 views

SUSE CVE-2026-68107

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcnv40encfindibparam instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. cherr...

8.8CVSS5.3AI score0.00175EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/08/11 7:23 p.m.•13 views

CVE-2026-68107

A flaw was found in the Linux kernel. Specifically, within the drm/amdgpu/vcn4 component, a time-of-check to time-of-use TOCTOU vulnerability exists. This occurs because the system re-reads the IB parameter length instead of reusing an already obtained value. This could allow a local attacker to...

8.8CVSS5.3AI score0.00175EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
•added 2026/08/11 8:14 a.m.•10 views

drm/amdgpu/vcn4: avoid rereading IB param length

...

8.8CVSS5.2AI score0.00175EPSS
SaveExploits0
OSV
OSV
•added 2026/08/10 1:19 p.m.•8 views

UBUNTU-CVE-2026-68107

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcnv40encfindibparam instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. cherr...

8.8CVSS5.2AI score0.00175EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2026/08/10 1:19 p.m.•13 views

CVE-2026-68107

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcnv40encfindibparam instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. cherr...

8.8CVSS5.4AI score0.00175EPSS
SaveExploits0References6
OSV
OSV
•added 2026/08/10 11:58 a.m.•17 views

CVE-2026-68107 drm/amdgpu/vcn4: avoid rereading IB param length

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcnv40encfindibparam instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. cherr...

8.8CVSS5.3AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/08/10 11:58 a.m.•41 views

CVE-2026-68107 drm/amdgpu/vcn4: avoid rereading IB param length

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcnv40encfindibparam instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. cherr...

8.8CVSS0.00175EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/10 11:58 a.m.•10 views

CVE-2026-68107

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcnv40encfindibparam instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. cherr...

8.8CVSS5.2AI score0.00175EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2026/08/10 11:58 a.m.•53 views

CVE-2026-68107

The CVE-2026-68107 relates to the Linux kernel’s drm/amdgpu/vcn4 component, where a TOCTOU vulnerability arises from rereading the IB parameter length instead of reusing the value previously obtained. The fix reuses the length returned by vcn_v4_0_enc_find_ib_param() rather than rereading it from...

8.8CVSS5.2AI score0.00175EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/10 12:00 a.m.•23 views

PT-2026-69507

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A TOCTOU Time-of-Check to Time-of-Use issue exists in the drm/amdgpu/vcn4 component. This occurs when the system rereads the IB parameter length instead of reusing the value returned by...

8.8CVSS5.3AI score0.00175EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/10 12:00 a.m.•2 views

CVE-2026-68107: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcnv40encfindibparam instead of rereading it from the IB. This avoids a potential TOCTOU issue if the IB contents change between reads. cherr...

8.8CVSS5.8AI score0.00175EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/06/19 11:10 a.m.•9 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg. Check the bounds against the end of the BO whenever we access the msg...

7.1CVSS5.7AI score0.00167EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/06/03 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-46217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Avoid overflow on msg bound check As pointed out by SDL, the previous...

5.4AI score0.00013EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2026/05/29 8:08 a.m.•18 views

drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

...

7.1CVSS5.4AI score0.00167EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/05/29 1:15 a.m.•19 views

SUSE CVE-2026-46199

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg Check bounds against the end of the BO whenever we access the msg...

5.5CVSS5.8AI score0.00167EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2026/05/29 1:14 a.m.•18 views

SUSE CVE-2026-46217

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.5CVSS5.2AI score0.00013EPSS
SaveExploits0References3
Rows per page
Query Builder