{"id":"CVE-2026-80908","summary":"drm/amdgpu: Reject UVD message with dimensions above 4096","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Reject UVD message with dimensions above 4096\n\nFixes potential overflow in DPB size calculations.\n\n(cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10)","modified":"2026-09-09T03:30:39.838750903Z","published":"2026-09-04T17:19:19.155Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80908.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/17fbb996c05f2190e0fa20927ca0b9804d481b02"},{"type":"WEB","url":"https://git.kernel.org/stable/c/339deb76ee4859ea973e435c9a9a4a4fefc29338"},{"type":"WEB","url":"https://git.kernel.org/stable/c/382bef781ff441ce8055bdada57b8c291dc0fd30"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8435d41afcf2bc31ecee213ef651c12bd1a16d38"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8bae80eaed00e7ae28412a3cdf590f4beca72294"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8c9aebcdd9f46f7a14b98d6ab18574b7a48fbb08"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9adc5e25f31d7ee7dfc18814499b6e3a6d402904"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f7af372d3b892b95dd3cd1c6acf29daa39ba076d"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80908.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80908"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d38ceaf99ed015f2a0b9af3499791bd3a3daae21"},{"fixed":"8bae80eaed00e7ae28412a3cdf590f4beca72294"},{"fixed":"9adc5e25f31d7ee7dfc18814499b6e3a6d402904"},{"fixed":"382bef781ff441ce8055bdada57b8c291dc0fd30"},{"fixed":"8435d41afcf2bc31ecee213ef651c12bd1a16d38"},{"fixed":"f7af372d3b892b95dd3cd1c6acf29daa39ba076d"},{"fixed":"339deb76ee4859ea973e435c9a9a4a4fefc29338"},{"fixed":"17fbb996c05f2190e0fa20927ca0b9804d481b02"},{"fixed":"8c9aebcdd9f46f7a14b98d6ab18574b7a48fbb08"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80908.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0"},{"fixed":"5.10.266"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.217"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.184"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.153"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.105"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.46"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-80908.json"}}],"schema_version":"1.9.0"}