In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup

vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc,
vddci and vddmem lookup tables without bounds checks across nine sites.
Return -EINVAL when any index is out of range.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
f83a9991648bb4023a53104db699e99305890d51 affected < 206e478810d6af50b25d8da72e3af8d55a014365
f83a9991648bb4023a53104db699e99305890d51 affected < 25dedc13ceb9b6109c79c92a726ca4ca017c9eaa
f83a9991648bb4023a53104db699e99305890d51 affected < ae25c92d91f2cb90ede2b0eb0f58efa82ccc718b
f83a9991648bb4023a53104db699e99305890d51 affected < b349dcf061a6dc8c6cef9a10530331ef2ff66c72
f83a9991648bb4023a53104db699e99305890d51 affected < dfe89f1a0c7f40ef858b93881198f9728df956cf
f83a9991648bb4023a53104db699e99305890d51 affected < 46d27e56dbd6345b9c7b62b67ec57407bf3bf29a
f83a9991648bb4023a53104db699e99305890d51 affected < 06aef6dcc1d52da5112cbcde39c062e493247ab5
f83a9991648bb4023a53104db699e99305890d51 affected < 6fa33f594e46e775a94097f71b486d7b006b6917
Linux Linux affected
Version Status Constraints
4.12 affected —
0 unaffected < 4.12
5.10.270 unaffected ≤ 5.10.*
5.15.221 unaffected ≤ 5.15.*
6.1.188 unaffected ≤ 6.1.*
6.6.157 unaffected ≤ 6.6.*
6.12.110 unaffected ≤ 6.12.*
6.18.52 unaffected ≤ 6.18.*
7.2.6 unaffected ≤ 7.2.*
7.3-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/06aef6dcc1d52da5112cbcde39c062e493247ab5 cve-icon
https://git.kernel.org/stable/c/206e478810d6af50b25d8da72e3af8d55a014365 cve-icon
https://git.kernel.org/stable/c/25dedc13ceb9b6109c79c92a726ca4ca017c9eaa cve-icon
https://git.kernel.org/stable/c/46d27e56dbd6345b9c7b62b67ec57407bf3bf29a cve-icon
https://git.kernel.org/stable/c/6fa33f594e46e775a94097f71b486d7b006b6917 cve-icon
https://git.kernel.org/stable/c/ae25c92d91f2cb90ede2b0eb0f58efa82ccc718b cve-icon
https://git.kernel.org/stable/c/b349dcf061a6dc8c6cef9a10530331ef2ff66c72 cve-icon
https://git.kernel.org/stable/c/dfe89f1a0c7f40ef858b93881198f9728df956cf cve-icon
History

Thu, 17 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc, vddci and vddmem lookup tables without bounds checks across nine sites. Return -EINVAL when any index is out of range.
Title drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-17T16:12:05.955Z

Reserved: 2026-09-17T16:02:15.091Z

Link: CVE-2026-93177

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.