Linux Kernel UVD Message Handling Vulnerability in AMD Graphics

CVE-2026-80909

What is CVE-2026-80909?

A flaw in the Linux kernel's AMD GPU driver (drm/amdgpu) allows improper handling of UVD messages with an invalid number of H.265 reference frames. This can lead to potential overflow situations during the calculation of the minimum decoded picture buffer size, creating risks in system reliability and performance. The issue has been addressed to ensure that invalid UVD messages are effectively rejected, providing enhanced protection against overflow vulnerabilities.

References