CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix division by zero with invalid uvd dimensions
When width or height is less than 16, widthinmb or heightinmb becomes 0, leading to fsinmb being 0. This causes a division by zero when calculating numdpbbuffer in H264 and H264 Perf decode paths.
Add validation to reject frames with width < 16 or height < 16 before performing any calculations that depend on these values.
V2: Format change - move up all vaiable definitions. V3: Use warnonce to avoid spam.
(cherry picked from commit 3e41d26c70b0a459d041cc19482a226c4b7423cb)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the kernel-side fix described in the material for drm/amdgpu: fix division by zero with invalid uvd dimensions by adding validation to reject UVD frames with width < 16 or height < 16 (so width_in_mb/height_in_mb do not become 0 before dependent calculations such as fs_in_mb and num_dpb_buffer for H264/H264 Perf decode).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68106?
The severity of CVE-2026-68106 is rated at 22.
How do I fix CVE-2026-68106?
To fix CVE-2026-68106, update to the latest version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2026-68106?
CVE-2026-68106 affects systems running specific versions of the Linux kernel that include the amdgpu driver.
What issues can arise from CVE-2026-68106?
CVE-2026-68106 can lead to a division by zero error, which may cause system crashes or undefined behavior.
When was CVE-2026-68106 published?
CVE-2026-68106 was published on August 10, 2026.