CVE-2026-97425

Source
https://cve.org/CVERecord?id=CVE-2026-97425
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97425.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97425
Downstream
Published
2026-09-24T16:03:38Z
Modified
2026-10-05T02:30:21Z
Summary
drm/amdgpu: fix buffer overflow during vBIOS update
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix buffer overflow during vBIOS update

Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97425.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8424f2ccb3c0dd43369288a47d15c980136c3bd5
Fixed
4a1b0a4c5acbe96368d71157b264dcd917ba6c9e
Fixed
c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992
Fixed
29fef371331e87311822000535f491ffc3d7a64f
Fixed
6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97425.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97425.json"