SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-80909

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-19

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the amdgpu driver, specifically related to handling UVD messages with an invalid number of H.265 reference frames. This flaw could lead to potential overflow issues during the calculation of minimum decoded picture buffer (DPB) size, which may compromise system stability or security. Users and administrators of Linux systems utilizing the amdgpu driver should prioritize applying the relevant updates to mitigate any associated risks.

CVE
CVE-2026-80909
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux F5

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. (cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5)