Lucene search
+L

9 matches found

OSV
OSV
•added 2026/09/16 11:16 a.m.•14 views

DEBIAN-CVE-2026-89818

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and the bounds check passes, letting the parser loop far past the end of...

7.1CVSS6.6AI score0.00167EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 11:16 a.m.•12 views

CVE-2026-89818

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and the bounds check passes, letting the parser loop far past the end of...

7.1CVSS0.00167EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/16 11:16 a.m.•10 views

AZL-101156 CVE-2026-89818 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and the bounds check passes, letting the parser loop far past the end of...

7.1CVSS6.5AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 10:30 a.m.•33 views

CVE-2026-89818 drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and the bounds check passes, letting the parser loop far past the end of...

7.1CVSS0.00167EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/16 10:30 a.m.•47 views

CVE-2026-89818

CVE-2026-89818 is an integer overflow in the Linux kernel's drm/amdgpu/vcn driver, specifically in the dec_msg buffer count check. If the supplied msg[2] (num_buffers) is 0x3FFFFFFF, the expression 6 + num_buffers * 4 wraps to 2, causing the bounds check to pass and allowing the parser loop to re...

7.1CVSS6.5AI score0.00167EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/16 10:30 a.m.•12 views

EUVD-2026-80418

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and the bounds check passes, letting the parser loop far past the end of...

7.1CVSS6.5AI score0.00167EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•3 views

CVE-2026-89818: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and the bounds check passes, letting the parser loop far past the end of...

7.1CVSS6.5AI score0.00167EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-89818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and...

7.1CVSS7.2AI score0.00167EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2026/05/08 9:09 a.m.•8 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fixed an integer overflow in the check on the decmsg buffer count. If the value of msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 results in a value that wraps down to 2. This allows the bounds che...

7.1CVSS6.2AI score0.00167EPSS
SaveExploits0References2
Rows per page
Query Builder