PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-46230 Linux CVE debrief

A bounds-checking vulnerability in the Linux kernel's AMDGPU driver for VCN3 (Video Core Next 3) hardware could allow out-of-bounds (OOB) memory reads when parsing decoder messages. The flaw exists in the VCN3 decode message parsing path where buffer object (BO) bounds were not validated before accessing message data. An attacker with local access could potentially trigger OOB reads, leading to information disclosure or kernel instability. The vulnerability has been resolved by adding explicit bounds checks against the end of the buffer object whenever the decode message is accessed.

Vendor
Linux
Product
Unknown
CVSS
HIGH 7.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-28
Original CVE updated
2026-05-30
Advisory published
2026-05-28
Advisory updated
2026-05-30

Who should care

Organizations running Linux systems with AMD GPUs featuring VCN3 hardware, particularly those using video decode capabilities; cloud providers offering GPU instances with AMD hardware; desktop Linux users with affected AMD graphics cards

Technical summary

The vulnerability exists in the AMDGPU DRM driver's VCN3 (Video Core Next 3) decode message parsing code. When processing decoder messages, the driver failed to validate that accesses remained within the bounds of the buffer object (BO). This could result in out-of-bounds reads from kernel memory. The resolution adds explicit bounds checks comparing access offsets against the end of the BO before reading message data. The fix has been backported to multiple stable kernel branches as evidenced by five separate kernel.org stable tree commits.

Defensive priority

medium

Recommended defensive actions

  • Apply kernel updates containing the referenced stable tree commits when available from your Linux distribution
  • Monitor distribution security advisories for kernel package updates addressing CVE-2026-46230
  • Verify VCN3 hardware is present in affected systems (AMD GPUs with Video Core Next 3)
  • Review system logs for unusual AMDGPU driver errors that may indicate exploitation attempts
  • Consider disabling VCN3 decode functionality if not required, pending patch availability

Evidence notes

The CVE description confirms this is a resolved Linux kernel vulnerability in drm/amdgpu/vcn3. The fix adds bounds checking to prevent OOB reads during decoder message parsing. Five kernel.org stable tree commits are referenced, indicating backports to multiple kernel versions. The NVD entry shows status 'Awaiting Analysis' with no CVSS score assigned. No KEV listing or known ransomware campaign use is indicated.

Official resources

2026-05-28