CVE-2026-46204: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Configuration
Rewrite IB parsing in drm/amdgpu/vcn4 to use amdgpu_ib_get_value() so it handles the bounds checks, preventing OOB reads when parsing IB.
Linux kernel (drm/amdgpu/vcn4) IB parsing implementation = use amdgpu_ib_get_value()
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46204?
The severity of CVE-2026-46204 is rated as high with a CVSS score of 7.1.
How do I fix CVE-2026-46204?
To fix CVE-2026-46204, ensure that your Linux kernel is updated to the latest version that includes the relevant patches for the amdgpu vcn4.
What type of vulnerability is CVE-2026-46204?
CVE-2026-46204 is an out-of-bounds read vulnerability in the Linux kernel related to the amdgpu graphics driver.
What impact does CVE-2026-46204 have on systems?
CVE-2026-46204 can potentially allow an attacker to read sensitive memory, leading to information disclosure.
Are there any exploit scenarios for CVE-2026-46204?
Exploitation of CVE-2026-46204 could occur in scenarios where unprivileged users can interact with the amdgpu driver, particularly in systems running vulnerable kernel versions.