{"id":"CVE-2026-46230","title":"drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg\n\nCheck bounds against the end of the BO whenever we access the msg.","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < f55552adb100eb54a6e6dabff4fbdc8679bd3fa0","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 82c535eff05490c71153af57de9fe85502fcb5d5","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 638d3e0b9eb77aa53fdd60e2b928761d16ba76fa","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 870c8738c3774336baedddd0240951d078a703b8","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 638e48ee39d0f2af9336f917a6f5d6692dd64d93","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7","Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < b193019860d61e92da395eae2011f2f6716b182f","Linux 5.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-16T15:21:15.916047Z"},"published":"2026-05-28","updated":"2026-10-16","sourceUpdated":"2026-10-16T15:31:08.719Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-46230","references":[{"url":"https://git.kernel.org/stable/c/f55552adb100eb54a6e6dabff4fbdc8679bd3fa0"},{"url":"https://git.kernel.org/stable/c/82c535eff05490c71153af57de9fe85502fcb5d5"},{"url":"https://git.kernel.org/stable/c/638d3e0b9eb77aa53fdd60e2b928761d16ba76fa"},{"url":"https://git.kernel.org/stable/c/870c8738c3774336baedddd0240951d078a703b8"},{"url":"https://git.kernel.org/stable/c/638e48ee39d0f2af9336f917a6f5d6692dd64d93"},{"url":"https://git.kernel.org/stable/c/e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7"},{"url":"https://git.kernel.org/stable/c/b193019860d61e92da395eae2011f2f6716b182f"}],"tags":["cve.org"],"epss":0.00122,"epssPercentile":0.0182,"ingestedAt":"2026-10-16T17:24:46.713Z","slug":"CVE-2026-46230","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg\n\nCheck bounds against the end of the BO whenever we access the msg.\n\n## Affected\n\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < f55552adb100eb54a6e6dabff4fbdc8679bd3fa0`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 82c535eff05490c71153af57de9fe85502fcb5d5`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 638d3e0b9eb77aa53fdd60e2b928761d16ba76fa`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 870c8738c3774336baedddd0240951d078a703b8`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < 638e48ee39d0f2af9336f917a6f5d6692dd64d93`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < e382e0b81a3e7bd21504fee1d01ae8b08f84d3a7`\n- `Linux >= 87cc7f9ebf7ce10f82250002d667ef3e93a79d44 < b193019860d61e92da395eae2011f2f6716b182f`\n- `Linux 5.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}