OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-93178

HIGH · CVSS 7.1 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of voltage index lookups in the AMD GPU power management subsystem, specifically within the SMU7 architecture. An attacker could exploit this flaw to cause out-of-bounds access, potentially leading to system instability or crashes. Organizations utilizing affected Linux distributions with AMD GPUs should prioritize addressing this issue to maintain system integrity and performance.

CVE
CVE-2026-93178
Severity
HIGH
CVSS
7.1
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup vddInd and vddcInd fields from VBIOS-parsed tables are used to index into voltage lookup tables without a bounds check. Return -EINVAL when any index is out of range.