CVE-2026-80907: drm/amdgpu: Fix UVD dpb min size calculation for H264
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix UVD dpb min size calculation for H264
This should use actual number of references from the decode message, instead of maximum derived from level.
(cherry picked from commit 64b525edb7e7bdfcdc77883c5e413804e2396856)
Event History
Frequently Asked Questions
Which systems are relevant to this issue?
The affected component is the Linux kernel's AMDGPU UVD H.264 decode path. Systems not using that driver and decode path are not indicated by the provided information to be affected.
What input condition triggers the corrected behavior?
The issue concerns H.264 decoding where the decoded-picture-buffer minimum size is calculated. The fix uses the actual number of references in the decode message rather than a maximum derived from the H.264 level.
How can I determine whether a fix is available for my kernel?
Check whether your kernel includes one of the referenced stable commits: fa96c24485942e277483cc70d9551d9e0111d7c5, 33f4ef585368fe93523dca1e5440e006f6e5146e, or 38914cb2c6afb5fe00241ea3438e655822196378.