In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets
The VCPU BO contains the actual FW at an offset, but it was not calculated into the VCPU BO size. Subtract this from the FW size to make sure there is no out of bounds access.
Make sure the stack and data offsets are aligned to the 32K TLB size.
Check that the FW microcode actually fits in the space that is reserved for it.
(cherry picked from commit c16fe59f622a080fc457a57b3e8f14c780699449)
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Aug 4, 2026 | Jul 25, 2026 |
| Ubuntu | — | Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-aws-7.0Upgrade linux-image-raspiUpgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-aws-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-gcpUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-gcp-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia | Jul 28, 2026 | Jul 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub