SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80540

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the AMD GPU driver, specifically in the UVD decode image size calculation, which improperly uses width instead of pitch and fails to reject pitch values over 4096. This oversight could lead to potential overflow issues, impacting system stability and security. Linux system administrators and developers working with AMD GPU hardware should prioritize applying the fix to mitigate any associated risks.

CVE
CVE-2026-80540
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. (cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)