PT-2026-44341 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-06-04 · CVE-2026-46218

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A bounds checking issue exists in the Linux kernel DRM AMD GPU driver. The uvd, vce, and vcn components access the Indirect Buffer (IB) at predefined offsets without verifying if the IB is sufficiently large. This is addressed by adding bounds checking to the ib get value() and ib set value() functions and updating the idx variable to a uint32 t type to prevent integer overflows that could cause the boundary condition check to fail.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-46218

ECHO-0059-A224-532D

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 295

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46218.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46218 · Vendor Advisory
• https://git.kernel.org/stable/c/fec8b11b55e53ff51a741e56894fe331a516f5c6 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a853178d23e774adfe3a35073c375b04b3b20f7d · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-46218 · Vendor Advisory
• https://git.kernel.org/stable/c/66085e206431ef88ce36f53c1f53d570790ccc9e · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-46218 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46218 · Vendor Advisory
• https://git.kernel.org/stable/c/5da6c6430be0acb25b4242bce0323fc514d4e3cf · Patch
• https://ubuntu.com/security/CVE-2026-46218 · Vendor Advisory
• https://git.kernel.org/stable/c/0fb5cb556b249b2b64c0f818136c4c3e838ef53f · Patch
• https://git.kernel.org/stable/c/ee26fcf7c5cf131f0b6a732faa27d79ec61b8ec7 · Patch
• https://osv.dev/vulnerability/CVE-2026-46218 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-46218 · Security Note