Skip to main content

Linux Kernel CVE-2026-46204

| EUVDEUVD-2026-32831 HIGH
Out-of-bounds Read (CWE-125)
2026-05-28 416baaa9-dc9f-4396-8d5f-8c081fb06d67 GHSA-2hxx-m8v6-fcm5
Buffer Overflow Information Disclosure Linux
7.1
CVSS 3.1 · Vendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Obtain local shell with render group access
  2. Delivery
    Open /dev/dri/renderD128 amdgpu device
  3. Exploit
    Allocate and craft malicious VCN4 IB
  4. Execution
    Submit IB via amdgpu_cs ioctl
  5. Persist
    Parser reads past buffer bounds
  6. Impact
    Leak kernel memory or trigger oops

Vulnerability Assessment

Weakness
CWE
CWE-125
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, read limits
MITRE ATT&CK

1 technique across 1 tactic: Collection

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

Attacker must have local code execution on the host with membership in the render or video group (or equivalent access to /dev/dri/renderD*), the target system must run a vulnerable Linux kernel before 6.6.140 / 6.12.90 / 6.18.32 / 7.0.9 / 7.1-rc1, and the hardware must include an AMD GPU exposing the VCN4 video engine (Radeon RX 7000-series, Radeon Pro W7000-series, or Instinct MI300-class). No user interaction is required (UI:N) and authentication is at the low-privilege user level (PR:L) - no root or special capability is needed beyond GPU device access. Exploitation is not possible remotely, on systems without an AMD VCN4-capable GPU, or where the amdgpu driver is unloaded or render nodes are restricted.
Impact

The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H scores 7.1 and accurately reflects a local, low-complexity, low-privilege attack with high confidentiality and availability impact but no integrity impact - consistent with a kernel OOB read that can leak memory and crash the system. EPSS at 0.02% (6th percentile) and absence from CISA KEV indicate no observed in-the-wild exploitation, and no public exploit identified at time of analysis. SSVC data is not provided, but the combination of local-only attack vector, requirement for GPU device access (typically restricted to logged-in graphical sessions or render group members), and a narrow hardware target (AMD VCN4-capable GPUs) keeps real-world risk moderate - prioritize for multi-tenant or shared GPU systems and confidential workloads, but routine for single-user workstations.
Exploit ScenarioDerived

A local user with access to the AMD render device node (/dev/dri/renderD128) submits a crafted indirect buffer to the VCN4 video engine via the amdgpu ioctl interface, with packet offsets that point beyond the IB's allocated length. The unchecked parser reads adjacent kernel memory while interpreting the malformed packet, leaking sensitive data back through error paths or driver state, or dereferencing into unmapped memory to crash the kernel and deny service to all GPU users. No public exploit identified at time of analysis, but the bug class is well-understood and reproducible from any user with GPU access.
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – May 30, 2026

Out-of-bounds read in the Linux kernel's AMD GPU VCN4 (Video Core Next) driver allows a local user with GPU access to trigger memory disclosure or denial of service by submitting a crafted indirect buffer (IB) to the amdgpu DRM subsystem. The flaw stems from missing bounds checks while parsing IBs in the drm/amdgpu/vcn4 code path, and no public exploit identified at time of analysis. EPSS exploitation probability is very low (0.02%) and the issue is not listed in CISA KEV.

RemediationAI

Vendor-released patch: upgrade to Linux 6.6.140, 6.12.90, 6.18.32, 7.0.9, or 7.1-rc1 or later depending on the stable branch in use, pulling the fix from any of the linked git.kernel.org stable commits (e.g., 1dc005775fb5b3f86464406452b17364f85581d3). Distribution users should apply the next kernel update from their vendor (RHEL, Ubuntu, SUSE, Debian, Oracle) once the backport is published. If immediate patching is not possible, compensating controls include restricting access to /dev/dri/renderD* device nodes by removing untrusted users from the render and video groups (side effect: those users lose hardware video decode/encode acceleration), disabling VCN4 hardware video decode in user-space clients such as Mesa/VA-API (side effect: video playback falls back to CPU decoding with higher load), or, in container and multi-tenant hosts, refusing to pass through the amdgpu render node to untrusted workloads.

Affected VersionsENISA

Linux 0 <6.18.32
Linux patch: 7.0.9
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <5c3e8ebad0c9e2354ddfa8f2148dc4f70a3b4bd1
Linux patch: 6.18.32
Linux 0 <6.12.90
Linux 0 <7.0.9
Linux patch: 7.1-rc1
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <2444eb0ec8283f4a3845eb7febad378476e1ba3c
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <1dc005775fb5b3f86464406452b17364f85581d3
Linux patch: 6.12.90
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <a6d5563ba1f03a049561cd347574613167294e8d
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <d0802a8877d730260d4af4dd4e0b6cde7e0e593f
Linux 0 <6.6.140
Linux patch: 6.6.140

Affected Packages

euvd linux fix: 6.6.140, 6.12.90, 6.18.32, 7.0.9

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

The vulnerability resides in the amdgpu kernel DRM driver supporting AMD's Video Core Next 4 (VCN4) hardware block, which performs video encode/decode acceleration on recent Radeon and Instinct GPUs. User-space clients submit work to the GPU through Indirect Buffers (IBs) that the kernel must parse before dispatch; the original VCN4 IB parser indexed into the buffer directly without validating offsets against the IB length, producing an out-of-bounds read class issue (CWE-125-style, though the CVE entry lists CWE as N/A). The fix replaces direct indexing with amdgpu_ib_get_value(), a helper that performs bounds checks against the IB size before returning each dword, preventing reads past the buffer.

Know when the next one hits your stack

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67) PRIMARY 7.1 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
SUSE HIGH

Primary rating from Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67).

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High

Lifecycle Timeline

4
CVSS changed
May 30, 2026 - 11:22 NVD
7.1 (HIGH)
Patch available
May 28, 2026 - 12:01 EUVD
CVE Published
May 28, 2026 - 10:16 nvd
UNKNOWN (no severity yet)
CVE Published
May 28, 2026 - 10:16 nvd
HIGH 7.1

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/vcn4: Prevent OOB reads when parsing IB

Rewrite the IB parsing to use amdgpu_ib_get_value() which handles the bounds checks.

Executive ViewAI

Why It Matters

A flaw in Linux kernel AMD GPU drivers allows local users with GPU access to trigger memory disclosure or service disruption, creating risk for organizations operating AMD GPU-equipped systems in shared or untrusted user environments. With no public exploit code and 0.0% estimated exploitation likelihood, immediate risk is low, but patching is essential for systems with less-controlled user access.

Business Impact: Medium
Compensating Controls

Apply vendor patch. Interim mitigation: restrict GPU access to trusted users only and disable GPU access for untrusted local accounts where operationally feasible.

Threat Intelligence Overview

EPSS Score
0.0%
Top 94% exploitable
Data Quality
6 sources
Confidence: High
EUVD NVD CVE.org EPSS MSRC Vendor VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.0%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Defer
Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No
Human Impact
Medium

Priority Score

36
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +36
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

Same weakness CWE-125 – Out-of-bounds Read

View all
CVE-2014-0160 HIGH POC
7.5
CVE-2016-5198 HIGH POC
8.8
CVE-2025-5777 CRITICAL POC
9.3
CVE-2016-1646 HIGH POC
8.8
CVE-2017-5030 HIGH POC
8.8
CVE-2016-4523 HIGH
7.5
CVE-2024-48456 HIGH POC
7.5
CVE-2024-48457 HIGH POC
7.5

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: High
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-46204 ADVISORY https://ubuntu.com/security/notices/USN-8566-1 ADVISORY https://ubuntu.com/security/notices/USN-8567-1 ADVISORY https://ubuntu.com/security/notices/USN-8568-1 ADVISORY https://vuldb.com/vuln/366707 REF https://git.kernel.org/stable/c/1dc005775fb5b3f86464406452b17364f85581d3 REF https://git.kernel.org/stable/c/2444eb0ec8283f4a3845eb7febad378476e1ba3c REF https://git.kernel.org/stable/c/5c3e8ebad0c9e2354ddfa8f2148dc4f70a3b4bd1 REF https://git.kernel.org/stable/c/92724364702fd12d99f441a4af11d9c8bcd52217 REF https://git.kernel.org/stable/c/a6d5563ba1f03a049561cd347574613167294e8d REF https://git.kernel.org/stable/c/d0802a8877d730260d4af4dd4e0b6cde7e0e593f

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy