CVE-2026-46237 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Avoid overflow on msg bound check As pointed out by SDL, the previous condition may be vulnerable to overflow. (cherry picked from commit db00257ac9e4a51eb2515aaea161a019f7125e10)

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00018.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products

References

Link	Providers
https://git.kernel.org/stable/c/016b64a0313ea5346cf526e30c8d3e66aca10175
https://git.kernel.org/stable/c/1936310f68c54be961de38ac539cef9b543207cb
https://git.kernel.org/stable/c/2e43b66fceacd6e982b94f2e3f8b34edd7463396
https://git.kernel.org/stable/c/e6e9faba8100628990cccd13f0f044a648c303cf
https://git.kernel.org/stable/c/e8124121b79ab5d32fa8fbbd101f7208eca9cd7d

History

Thu, 28 May 2026 10:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Avoid overflow on msg bound check As pointed out by SDL, the previous condition may be vulnerable to overflow. (cherry picked from commit db00257ac9e4a51eb2515aaea161a019f7125e10)
Title		drm/amdgpu/vcn3: Avoid overflow on msg bound check
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/016b64a0313ea5346cf526e30c8d3e66aca10175 https://git.kernel.org/stable/c/1936310f68c54be961de38ac539cef9b543207cb https://git.kernel.org/stable/c/2e43b66fceacd6e982b94f2e3f8b34edd7463396 https://git.kernel.org/stable/c/e6e9faba8100628990cccd13f0f044a648c303cf https://git.kernel.org/stable/c/e8124121b79ab5d32fa8fbbd101f7208eca9cd7d

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-05-28T09:41:06.023Z

Updated: 2026-05-28T09:41:06.023Z

Reserved: 2026-05-13T15:03:33.106Z

Link: CVE-2026-46237

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2026-05-28T10:16:39.333

Modified: 2026-05-28T13:44:01.663

Link: CVE-2026-46237

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-05-28T13:15:22Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46237", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.106Z", "datePublished": "2026-05-28T09:41:06.023Z", "dateUpdated": "2026-05-28T09:41:06.023Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-28T09:41:06.023Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn3: Avoid overflow on msg bound check\n\nAs pointed out by SDL, the previous condition may be vulnerable to\noverflow.\n\n(cherry picked from commit db00257ac9e4a51eb2515aaea161a019f7125e10)"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c"], "versions": [{"version": "638d3e0b9eb77aa53fdd60e2b928761d16ba76fa", "lessThan": "1936310f68c54be961de38ac539cef9b543207cb", "status": "affected", "versionType": "git"}, {"version": "870c8738c3774336baedddd0240951d078a703b8", "lessThan": "e8124121b79ab5d32fa8fbbd101f7208eca9cd7d", "status": "affected", "versionType": "git"}, {"version": "638e48ee39d0f2af9336f917a6f5d6692dd64d93", "lessThan": "016b64a0313ea5346cf526e30c8d3e66aca10175", "status": "affected", "versionType": "git"}, {"version": "e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7", "lessThan": "2e43b66fceacd6e982b94f2e3f8b34edd7463396", "status": "affected", "versionType": "git"}, {"version": "b193019860d61e92da395eae2011f2f6716b182f", "lessThan": "e6e9faba8100628990cccd13f0f044a648c303cf", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c"], "versions": [{"version": "7.1-rc1", "status": "affected"}, {"version": "0", "lessThan": "7.1-rc1", "status": "unaffected", "versionType": "semver"}, {"version": "7.1-rc2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.1-rc1", "versionEndExcluding": "7.1-rc2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/1936310f68c54be961de38ac539cef9b543207cb"}, {"url": "https://git.kernel.org/stable/c/e8124121b79ab5d32fa8fbbd101f7208eca9cd7d"}, {"url": "https://git.kernel.org/stable/c/016b64a0313ea5346cf526e30c8d3e66aca10175"}, {"url": "https://git.kernel.org/stable/c/2e43b66fceacd6e982b94f2e3f8b34edd7463396"}, {"url": "https://git.kernel.org/stable/c/e6e9faba8100628990cccd13f0f044a648c303cf"}], "title": "drm/amdgpu/vcn3: Avoid overflow on msg bound check", "x_generator": {"engine": "bippy-1.2.0"}}}}