CVE-2026-93177 is a vulnerability in Linux Kernel
Published on September 17, 2026
drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc,
vddci and vddmem lookup tables without bounds checks across nine sites.
Return -EINVAL when any index is out of range.
Products Associated with CVE-2026-93177
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version f83a9991648bb4023a53104db699e99305890d51 and below 206e478810d6af50b25d8da72e3af8d55a014365 is affected.
- Version f83a9991648bb4023a53104db699e99305890d51 and below 25dedc13ceb9b6109c79c92a726ca4ca017c9eaa is affected.
- Version f83a9991648bb4023a53104db699e99305890d51 and below ae25c92d91f2cb90ede2b0eb0f58efa82ccc718b is affected.
- Version f83a9991648bb4023a53104db699e99305890d51 and below b349dcf061a6dc8c6cef9a10530331ef2ff66c72 is affected.
- Version f83a9991648bb4023a53104db699e99305890d51 and below dfe89f1a0c7f40ef858b93881198f9728df956cf is affected.
- Version f83a9991648bb4023a53104db699e99305890d51 and below 46d27e56dbd6345b9c7b62b67ec57407bf3bf29a is affected.
- Version f83a9991648bb4023a53104db699e99305890d51 and below 06aef6dcc1d52da5112cbcde39c062e493247ab5 is affected.
- Version f83a9991648bb4023a53104db699e99305890d51 and below 6fa33f594e46e775a94097f71b486d7b006b6917 is affected.
- Version 4.12 is affected.
- Before 4.12 is unaffected.
- Version 5.10.270, <= 5.10.* is unaffected.
- Version 5.15.221, <= 5.15.* is unaffected.
- Version 6.1.188, <= 6.1.* is unaffected.
- Version 6.6.157, <= 6.6.* is unaffected.
- Version 6.12.110, <= 6.12.* is unaffected.
- Version 6.18.52, <= 6.18.* is unaffected.
- Version 7.2.6, <= 7.2.* is unaffected.
- Version 7.3-rc1, <= * is unaffected.