CVE-2026-97494

Source
https://cve.org/CVERecord?id=CVE-2026-97494
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97494.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97494
Downstream
Published
2026-09-24T16:04:41Z
Modified
2026-09-29T03:47:28Z
Summary
drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw

Change psp_copy_fw from void to int: return -ENODEV when drm_dev_enter fails, and -EINVAL when the image size is zero or larger than the 1 MiB PSP private buffer.

Replace open-coded memset/memcpy into fw_pri_buf with psp_copy_fw.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97494.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2b0c3aee2172451e9f982b25f3fdf59a1b687dc3
Fixed
25bec2425c3d50ba9a92ad87bbf8628be29e5c32
Fixed
1aa55af304a2decaacca1d1fabe4257c277ca54a
Fixed
d1f9f5839bd785a3a06335a01d53282e80f8e5fa

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97494.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.12.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97494.json"