EXPLOIT/ALERT Back to feed

Linux vulnerability

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables and cap the derived entry count to AMDGPU_MAX_I2C_BUS so we do not overrun adev->i2c_bus[] or walk an absurd number of entries on corrupt size fields.

Published 24 Sep 2026Updated 28 Sep 20262 sources
CVSS 0.0
Overview Sources History

What happened

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Reject undersized tables and cap the derived entry count to AMDGPU_MAX_I2C_BUS so we do not overrun adev->i2c_bus[] or walk an absurd number of entries on corrupt size fields.

Affected versions

Linux: d38ceaf99ed015f2a0b9af3499791bd3a3daae21 through before f8f0985375c3b977757fd73e2b691ff1bf1ea7b9 (git); d38ceaf99ed015f2a0b9af3499791bd3a3daae21 through before a99cd231cd924b7160fecb9fb3a94b801522323b (git); 4.2 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

No public PoC reference has passed the current publication threshold.

CorrectionsReport an issue