CVE-2026-93179: drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
Reject voltage objects whose usSize is smaller than the header or would advance the cursor past the table end, preventing an infinite loop or heap OOB read when the VBIOS supplies a malformed VoltageObjectInfo table.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (drm/amd/powerplay)to a version that resolves this vulnerability.Patch drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the Linux kernel AMD DRM powerplay code are exposed when they process a malformed VoltageObjectInfo table supplied by the VBIOS.
What must an attacker control to trigger the flaw?
The vulnerable parsing path is triggered by a malformed VBIOS VoltageObjectInfo table, specifically one containing an object size smaller than the header or a size that advances the parser beyond the table end.
What is the impact of a malformed table?
A zero or invalid object stride can cause an infinite parsing loop or a heap out-of-bounds read.
What mitigation is available if the fix cannot be applied immediately?
The provided information identifies malformed VBIOS VoltageObjectInfo data as the trigger, but does not provide a documented configuration workaround or mitigation other than applying the resolved kernel fix.