CVE-2026-93179 is a vulnerability in Linux Kernel
Published on September 17, 2026
drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
Reject voltage objects whose usSize is smaller than the header or would
advance the cursor past the table end, preventing an infinite loop or
heap OOB read when the VBIOS supplies a malformed VoltageObjectInfo table.
Products Associated with CVE-2026-93179
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version c82baa28184356a75c0157129f88af42b2e7b695 and below 83c680de6d41d627c077dedb24f89d9e5be0e2a2 is affected.
- Version c82baa28184356a75c0157129f88af42b2e7b695 and below 5d3cc8e388464f485d0944b87b8f9426e637d082 is affected.
- Version 4.5 is affected.
- Before 4.5 is unaffected.
- Version 7.2.6, <= 7.2.* is unaffected.
- Version 7.3-rc1, <= * is unaffected.