---
id: CVE-2026-93177
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup

  vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc,
  vddci and vddmem lookup tab…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup

  vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc,
  vddci and vddmem lookup tab…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f83a9991648bb4023a53104db699e99305890d51 <
    206e478810d6af50b25d8da72e3af8d55a014365
  - >-
    Linux >= f83a9991648bb4023a53104db699e99305890d51 <
    25dedc13ceb9b6109c79c92a726ca4ca017c9eaa
  - >-
    Linux >= f83a9991648bb4023a53104db699e99305890d51 <
    ae25c92d91f2cb90ede2b0eb0f58efa82ccc718b
  - >-
    Linux >= f83a9991648bb4023a53104db699e99305890d51 <
    b349dcf061a6dc8c6cef9a10530331ef2ff66c72
  - >-
    Linux >= f83a9991648bb4023a53104db699e99305890d51 <
    dfe89f1a0c7f40ef858b93881198f9728df956cf
  - >-
    Linux >= f83a9991648bb4023a53104db699e99305890d51 <
    46d27e56dbd6345b9c7b62b67ec57407bf3bf29a
  - >-
    Linux >= f83a9991648bb4023a53104db699e99305890d51 <
    06aef6dcc1d52da5112cbcde39c062e493247ab5
  - >-
    Linux >= f83a9991648bb4023a53104db699e99305890d51 <
    6fa33f594e46e775a94097f71b486d7b006b6917
  - Linux 4.12
published: '2026-09-17'
updated: '2026-09-18'
sourceUpdated: '2026-09-18T18:18:23.783'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93177'
references:
  - url: 'https://git.kernel.org/stable/c/06aef6dcc1d52da5112cbcde39c062e493247ab5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/206e478810d6af50b25d8da72e3af8d55a014365'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/25dedc13ceb9b6109c79c92a726ca4ca017c9eaa'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/46d27e56dbd6345b9c7b62b67ec57407bf3bf29a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6fa33f594e46e775a94097f71b486d7b006b6917'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ae25c92d91f2cb90ede2b0eb0f58efa82ccc718b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b349dcf061a6dc8c6cef9a10530331ef2ff66c72'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/dfe89f1a0c7f40ef858b93881198f9728df956cf'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00167
epssPercentile: 0.05248
ingestedAt: '2026-09-17T16:21:47.729Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup

vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc,
vddci and vddmem lookup tables without bounds checks across nine sites.
Return -EINVAL when any index is out of range.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.