PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-46230 Linux CVE debrief

A bounds-checking vulnerability in the Linux kernel's AMDGPU driver for VCN3 (Video Core Next 3) hardware could allow out-of-bounds (OOB) memory reads when parsing decoder messages. The flaw exists in the VCN3 decode message parsing path where buffer object (BO) bounds were not validated before accessing message data. An attacker with local access could potentially trigger OOB reads, leading to information disclosure or kernel instability. The vulnerability has been resolved by adding explicit bounds checks against the end of the buffer object whenever the decode message is accessed.

Vendor
Linux
Product
Unknown
CVSS
HIGH 7.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-28
Original CVE updated
2026-06-10
Advisory published
2026-05-28
Advisory updated
2026-06-10

Who should care

Organizations running Linux systems with AMD GPUs featuring VCN3 hardware, particularly those using video decode capabilities; cloud providers offering GPU instances with AMD hardware; desktop Linux users with affected AMD graphics cards

Technical summary

The vulnerability exists in the AMDGPU DRM driver's VCN3 (Video Core Next 3) decode message parsing code. When processing decoder messages, the driver failed to validate that accesses remained within the bounds of the buffer object (BO). This could result in out-of-bounds reads from kernel memory. The resolution adds explicit bounds checks comparing access offsets against the end of the BO before reading message data. The fix has been backported to multiple stable kernel branches as evidenced by five separate kernel.org stable tree commits.

Defensive priority

medium

Recommended defensive actions

  • Apply kernel updates containing the referenced stable tree commits when available from your Linux distribution
  • Monitor distribution security advisories for kernel package updates addressing CVE-2026-46230
  • Verify VCN3 hardware is present in affected systems (AMD GPUs with Video Core Next 3)
  • Review system logs for unusual AMDGPU driver errors that may indicate exploitation attempts
  • Consider disabling VCN3 decode functionality if not required, pending patch availability

Evidence notes

The CVE description confirms this is a resolved Linux kernel vulnerability in drm/amdgpu/vcn3. The fix adds bounds checking to prevent OOB reads during decoder message parsing. Five kernel.org stable tree commits are referenced, indicating backports to multiple kernel versions. The NVD entry shows status 'Awaiting Analysis' with no CVSS score assigned. No KEV listing or known ransomware campaign use is indicated.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-46230 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-46230

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-46230 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-46230

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/638d3e0b9eb77aa53fdd60e2b928761d16ba76fa

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/638e48ee39d0f2af9336f917a6f5d6692dd64d93

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/870c8738c3774336baedddd0240951d078a703b8

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/b193019860d61e92da395eae2011f2f6716b182f

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.