01 Record

CVE-2026-53138

drm/amd/display: Bound VBIOS record-chain walk loops

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

drm/amd/display: Bound VBIOS record-chain walk loops

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 1.9% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-07-07.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-06-25 08:38Z4 MO AGO

Last updated

2026-07-04 11:50Z3 MO AGO

Reserved

2026-06-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

dda6ada1d866436149343458c47bc0c2f7b989ca64cfb37bfd22b810390b5885

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < e94f5323c41f32a74160378c3b19850d1f203ad5, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 04e271a952b8863bbafc99bd51aca4c32bff0e0d, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 6723188c42ca3b34a9fce634d7a0ecc9ccd5cd56, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 499c6b43a79dd684bddbd18fe8b2235aa2764db4, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 6173cfea2f916e01c4f98e29cd654384a05e32a3, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 0e56f460bddb397fa9a8e6faf7ae7eaa86953eb1, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < 2645e3caf7e013189da9c6ff621d006cca5a538b, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to < ff287df16a1a58aca78b08d1f3ee09fc44da0351, 4.15—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e94f5323c41f32a74160378c3b19850d1f203ad5
git.kernel.orghttps://git.kernel.org/stable/c/04e271a952b8863bbafc99bd51aca4c32bff0e0d
git.kernel.orghttps://git.kernel.org/stable/c/6723188c42ca3b34a9fce634d7a0ecc9ccd5cd56
git.kernel.orghttps://git.kernel.org/stable/c/499c6b43a79dd684bddbd18fe8b2235aa2764db4
git.kernel.orghttps://git.kernel.org/stable/c/6173cfea2f916e01c4f98e29cd654384a05e32a3
git.kernel.orghttps://git.kernel.org/stable/c/0e56f460bddb397fa9a8e6faf7ae7eaa86953eb1
git.kernel.orghttps://git.kernel.org/stable/c/2645e3caf7e013189da9c6ff621d006cca5a538b
git.kernel.orghttps://git.kernel.org/stable/c/ff287df16a1a58aca78b08d1f3ee09fc44da0351

07 Fixed in

Debian 12

linux
Fixed in 6.1.177-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.94-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.0.13-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.