CVE-2026-64516
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/07/2026
Last modified:
25/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets<br />
<br />
The VCPU BO contains the actual FW at an offset, but<br />
it was not calculated into the VCPU BO size.<br />
Subtract this from the FW size to make sure there is<br />
no out of bounds access.<br />
<br />
Make sure the stack and data offsets are aligned to<br />
the 32K TLB size.<br />
<br />
Check that the FW microcode actually fits in the<br />
space that is reserved for it.<br />
<br />
(cherry picked from commit c16fe59f622a080fc457a57b3e8f14c780699449)