{"id":"CVE-2026-93177","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup\n\nvddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc,\nvddci and vddmem lookup tab…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup\n\nvddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc,\nvddci and vddmem lookup tab…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= f83a9991648bb4023a53104db699e99305890d51 < 206e478810d6af50b25d8da72e3af8d55a014365","Linux >= f83a9991648bb4023a53104db699e99305890d51 < 25dedc13ceb9b6109c79c92a726ca4ca017c9eaa","Linux >= f83a9991648bb4023a53104db699e99305890d51 < ae25c92d91f2cb90ede2b0eb0f58efa82ccc718b","Linux >= f83a9991648bb4023a53104db699e99305890d51 < b349dcf061a6dc8c6cef9a10530331ef2ff66c72","Linux >= f83a9991648bb4023a53104db699e99305890d51 < dfe89f1a0c7f40ef858b93881198f9728df956cf","Linux >= f83a9991648bb4023a53104db699e99305890d51 < 46d27e56dbd6345b9c7b62b67ec57407bf3bf29a","Linux >= f83a9991648bb4023a53104db699e99305890d51 < 06aef6dcc1d52da5112cbcde39c062e493247ab5","Linux >= f83a9991648bb4023a53104db699e99305890d51 < 6fa33f594e46e775a94097f71b486d7b006b6917","Linux 4.12"],"published":"2026-09-17","updated":"2026-09-18","sourceUpdated":"2026-09-18T18:18:23.783","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93177","references":[{"url":"https://git.kernel.org/stable/c/06aef6dcc1d52da5112cbcde39c062e493247ab5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/206e478810d6af50b25d8da72e3af8d55a014365","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/25dedc13ceb9b6109c79c92a726ca4ca017c9eaa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/46d27e56dbd6345b9c7b62b67ec57407bf3bf29a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6fa33f594e46e775a94097f71b486d7b006b6917","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/ae25c92d91f2cb90ede2b0eb0f58efa82ccc718b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b349dcf061a6dc8c6cef9a10530331ef2ff66c72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/dfe89f1a0c7f40ef858b93881198f9728df956cf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00159,"epssPercentile":0.05526,"ingestedAt":"2026-09-17T16:21:47.729Z","slug":"CVE-2026-93177","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup\n\nvddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc,\nvddci and vddmem lookup tables without bounds checks across nine sites.\nReturn -EINVAL when any index is out of range.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":207411,"id":"CVE-2026-93177","ts":1789757345037,"field":"cvss","old":null,"new":"7.3"},{"seq":207410,"id":"CVE-2026-93177","ts":1789757345037,"field":"severity","old":"none","new":"high"}]}