Out-Of-Bounds Access in AMD Display Driver for Linux Kernel

CVE-2026-46263

What is CVE-2026-46263?

A vulnerability in the AMD display driver for the Linux kernel allows for potential out-of-bounds memory access due to improper indexing of an array. The 'eng_id' variable can be negative or equal to 5, which leads to exceeding the bounds of the 'stream_enc_regs[]' array that expects a maximum index of 4. The issue arises in the function responsible for stream encoder creation, where insufficient bounds checking could result in accessing memory beyond the allocated space, posing risks for system stability and security. The applied patch introduces necessary bounds checks to ensure safe indexing and prevent such vulnerabilities.

References