Stack Buffer Overflow Vulnerability in Linux Kernel Affects AMD Display Drivers

CVE-2026-64219

What is CVE-2026-64219?

A stack buffer overflow vulnerability exists in the Linux kernel related to the AMD display drivers. Specifically, the function dc_process_dmub_aux_transfer_async copies a specified payload length into a fixed-size stack buffer without proper validation, opening the door to potential overflow conditions if the length exceeds the expected size. Additionally, a lack of bounds checking when using the link_index variable can lead to out-of-bounds memory access, which may be exploited by attackers to execute arbitrary code or cause system instability. The recommended fix includes implementing both a runtime check for payload length and a bounds check for the link_index prior to its usage.

References