CVE-2026-97427 Linux CVE debrief

Who should care

Linux kernel maintainers, administrators, and users of systems with amd drm/amd/pm deployments should assess their exposure and apply patches. Exposure verification and inventory checks are necessary for Linux kernel systems using amd drm/amd/pm. Linux kernel maintainers, administrators, and users of systems with amd drm/amd/pm deployments

Why it matters

A heap overflow vulnerability in Linux kernel's drm/amd/pm requires assessment and patching for deployed systems. Exposure verification and inventory checks are necessary.

• Potential heap overflow and data corruption
• Need to verify Linux kernel versions and configurations for exposure
• Patching required to prevent potential exploitation
• Exposure assessment and inventory checks are necessary

Technical summary

The Linux kernel's drm/amd/pm component has a heap overflow vulnerability due to an unbounded memcpy operation in pp_dpm_set_pp_table(). This issue has been resolved with patches available. The vulnerability was caused by an unbounded memcpy operation in the pp_dpm_set_pp_table() function, which could lead to a heap overflow. Linux kernel maintainers, administrators, and users of systems with amd drm/amd/pm deployments should assess their exposure and apply patches. Exposure verification and inventory checks are necessary.

Defensive priority

Assess exposure and apply patches for Linux kernel systems using amd drm/amd/pm

Recommended defensive actions

• Assess if Linux kernel systems using amd drm/amd/pm are deployed
• Verify if systems are affected by checking Linux kernel versions and configurations
• Apply patches or updates provided by the Linux kernel maintainers
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. Three source references from git.kernel.org are available. The Linux kernel's drm/amd/pm component has a heap overflow vulnerability due to an unbounded memcpy operation in pp_dpm_set_pp_table(). The issue has been resolved with patches available. Exposure verification and inventory checks are necessary.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.