SB2026082761 - Out-of-bounds write in Linux kernel amd amdgpu driver

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds write (CVE-ID: CVE-2026-80576)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to corrupt memory and cause a denial of service.

The vulnerability exists due to an out-of-bounds write in amdgpu_cs_p2_ib() when processing user-supplied indirect buffer lengths for command submission. A local user can submit an oversized indirect buffer to corrupt memory and cause a denial of service.

The issue affects GFX rings and can destabilize command submission because the indirect buffer length is encoded into packet control fields.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/07fe270ec07c138a70afe7a81e115a85c35c545c
• https://git.kernel.org/stable/c/1474f3970d1afd303e12ff14d06808eabb371576
• https://git.kernel.org/stable/c/6e164ba1057175fb8a370d8e05cbff5c57eac0c8
• https://git.kernel.org/stable/c/fd37f9dd5b5ab70a46fa7bc76623c0528d602b27