CVE-2026-80540 - Vulnerability Details

- drm/amdgpu: Fix UVD decode image min size calculation

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix UVD decode image min size calculation

This needs to use pitch instead of width. Also reject pitch
over 4096 to avoid overflow.

(cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)

Published: 2026-08-26

Score: n/a

EPSS: n/a

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< bc7397a033ac52f6d8c9bb6510d61694b2a3fce7
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< d058f7a6709441afe1784eecd8c0643dd84750bc
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< b7549e3f96c78921751c4b3e69af729662130d83
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 60539d517e8439621532d8c01091ac049c596b4b
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 271a7da84a6262a09de549912dcf6a749d169cb6
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 25ee120f3803ad9e416ef9f76f4c3234cc4d645b
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 5cbd8af02b0b9c8723fa30edcf6fccab5170af8d
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< b8bb9ba3f101a1b0011f785a577a4a0a38371174
`0`	affected	< 5.10.266
`0`	affected	< 5.15.217
`0`	affected	< 6.1.184
`0`	affected	< 6.6.153
`0`	affected	< 6.12.105
`0`	affected	< 6.18.46
`0`	affected	< 7.1.10

Linux

affected

Version	Status	Constraints
`5.10.266`	unaffected	≤ 5.10.*
`5.15.217`	unaffected	≤ 5.15.*
`6.1.184`	unaffected	≤ 6.1.*
`6.6.153`	unaffected	≤ 6.6.*
`6.12.105`	unaffected	≤ 6.12.*
`6.18.46`	unaffected	≤ 6.18.*
`7.1.10`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,bc7397a033ac52f6d8c9bb6510d61694b2a3fce7)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,d058f7a6709441afe1784eecd8c0643dd84750bc)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,b7549e3f96c78921751c4b3e69af729662130d83)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,60539d517e8439621532d8c01091ac049c596b4b)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,271a7da84a6262a09de549912dcf6a749d169cb6)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,25ee120f3803ad9e416ef9f76f4c3234cc4d645b)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,5cbd8af02b0b9c8723fa30edcf6fccab5170af8d)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,b8bb9ba3f101a1b0011f785a577a4a0a38371174)`	affected	code_commit	—
`[0,5.10.266)`	affected	semver	—
`[0,5.15.217)`	affected	semver	—
`[0,6.1.184)`	affected	semver	—
`[0,6.6.153)`	affected	semver	—
`[0,6.12.105)`	affected	semver	—
`[0,6.18.46)`	affected	semver	—
`[0,7.1.10)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[5.10.266,5.11.0)`	unaffected	semver	—
`[5.15.217,5.16.0)`	unaffected	semver	—
`[6.1.184,6.2.0)`	unaffected	semver	—
`[6.6.153,6.7.0)`	unaffected	semver	—
`[7.1.10,7.2.0)`	unaffected	semver	—
`[7.2,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/25ee120f3803ad9e416ef9f76f4c3234cc4d645b
https://git.kernel.org/stable/c/271a7da84a6262a09de549912dcf6a749d169cb6
https://git.kernel.org/stable/c/5cbd8af02b0b9c8723fa30edcf6fccab5170af8d
https://git.kernel.org/stable/c/60539d517e8439621532d8c01091ac049c596b4b
https://git.kernel.org/stable/c/b7549e3f96c78921751c4b3e69af729662130d83
https://git.kernel.org/stable/c/b8bb9ba3f101a1b0011f785a577a4a0a38371174
https://git.kernel.org/stable/c/bc7397a033ac52f6d8c9bb6510d61694b2a3fce7
https://git.kernel.org/stable/c/d058f7a6709441afe1784eecd8c0643dd84750bc

History

Wed, 26 Aug 2026 16:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-119

Wed, 26 Aug 2026 14:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. (cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)
Title		drm/amdgpu: Fix UVD decode image min size calculation
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/25ee120f3803ad9e416ef9f76f4c3234cc4d645b https://git.kernel.org/stable/c/271a7da84a6262a09de549912dcf6a749d169cb6 https://git.kernel.org/stable/c/5cbd8af02b0b9c8723fa30edcf6fccab5170af8d https://git.kernel.org/stable/c/60539d517e8439621532d8c01091ac049c596b4b https://git.kernel.org/stable/c/b7549e3f96c78921751c4b3e69af729662130d83 https://git.kernel.org/stable/c/b8bb9ba3f101a1b0011f785a577a4a0a38371174 https://git.kernel.org/stable/c/bc7397a033ac52f6d8c9bb6510d61694b2a3fce7 https://git.kernel.org/stable/c/d058f7a6709441afe1784eecd8c0643dd84750bc

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-26T14:37:13.966Z

Updated: 2026-08-26T14:37:13.966Z

Reserved: 2026-08-26T14:34:25.765Z

Link: CVE-2026-80540

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-26T15:17:08.257

Modified: 2026-08-26T15:17:08.257

Link: CVE-2026-80540

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-26T18:00:04Z

Weaknesses

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object