CVE-2026-97494
- Source
- https://cve.org/CVERecord?id=CVE-2026-97494
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97494.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-97494
- Downstream
- Related
- Published
- 2026-09-24T16:04:41Z
- Modified
- 2026-11-04T14:27:26Z
- Summary
- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
Change psp_copy_fw from void to int: return -ENODEV when drm_dev_enter fails, and -EINVAL when the image size is zero or larger than the 1 MiB PSP private buffer.
Replace open-coded memset/memcpy into fw_pri_buf with psp_copy_fw.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97494.json" }- References
-
- https://git.kernel.org/stable/c/1aa55af304a2decaacca1d1fabe4257c277ca54a
- https://git.kernel.org/stable/c/25bec2425c3d50ba9a92ad87bbf8628be29e5c32
- https://git.kernel.org/stable/c/8ddda06ae356fda0418b7017e658d976dad6214e
- https://git.kernel.org/stable/c/cb755c29d0fa8fa4b0630bf60cf434c30ffdf0c7
- https://git.kernel.org/stable/c/d1f9f5839bd785a3a06335a01d53282e80f8e5fa
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97494.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-97494
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced2b0c3aee2172451e9f982b25f3fdf59a1b687dc3Fixedcb755c29d0fa8fa4b0630bf60cf434c30ffdf0c7Fixed8ddda06ae356fda0418b7017e658d976dad6214eFixed25bec2425c3d50ba9a92ad87bbf8628be29e5c32Fixed1aa55af304a2decaacca1d1fabe4257c277ca54aFixedd1f9f5839bd785a3a06335a01d53282e80f8e5fa