CVE-2026-97425: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix buffer overflow during vBIOS update Clamp the buffer postion to write by setting the bin attribute to the maximum buffer size so that VFS layer will block the out-of-bounds accessing.

Засегнати продукти

• Linux Linux: 8424f2ccb3c0dd43369288a47d15c980136c3bd5 преди bce28deb42b9e8d368648a002ffe3a6124c482aa; 8424f2ccb3c0dd43369288a47d15c980136c3bd5 преди 4a1b0a4c5acbe96368d71157b264dcd917ba6c9e; 8424f2ccb3c0dd43369288a47d15c980136c3bd5 преди c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992; 8424f2ccb3c0dd43369288a47d15c980136c3bd5 преди 29fef371331e87311822000535f491ffc3d7a64f; 8424f2ccb3c0dd43369288a47d15c980136c3bd5 преди 6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5
• Linux Linux: 5.19; преди 5.19; 6.1.191 до 6.1.*; 6.6.158 до 6.6.*; 6.12.111 до 6.12.*; 6.18.53 до 6.18.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-97425
• https://nvd.nist.gov/vuln/detail/CVE-2026-97425
• https://git.kernel.org/stable/c/bce28deb42b9e8d368648a002ffe3a6124c482aa
• https://git.kernel.org/stable/c/4a1b0a4c5acbe96368d71157b264dcd917ba6c9e
• https://git.kernel.org/stable/c/c7b2af01ee2ecfb8f2289dc83524d8fb1ec72992
• https://git.kernel.org/stable/c/29fef371331e87311822000535f491ffc3d7a64f
• https://git.kernel.org/stable/c/6229898d46c0cbc238a6fe9f11c1ea12cf8bb9c5