← CVE Intelligence

CVE-2026-97493

drm/amdgpu: Bound GPIO I2C table entry count from VBIOS PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables and cap the derived entry count to AMDGPU_MAX_I2C_BUS so we do not overrun adev->i2c_bus[] or walk an absurd number of entries on corrupt size fields.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 0786b38af822fcd153d565cc85be7dbd9fed4d25; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before 6db45123306c7167c6867ca3d24924bd7960d947; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before f8f0985375c3b977757fd73e2b691ff1bf1ea7b9; affected d38ceaf99ed015f2a0b9af3499791bd3a3daae21 before a99cd231cd924b7160fecb9fb3a94b801522323b
Linux / Linuxaffected 4.2; unaffected 0 before 4.2; unaffected 6.6.160 through 6.6.*; unaffected 6.12.114 through 6.12.*; unaffected 6.18.53 through 6.18.*; unaffected 7.2 through *

CWE

No CWE identifiers supplied.

References