01 Record

CVE-2026-80909

drm/amdgpu: Reject UVD message with invalid number of h265 refs

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

drm/amdgpu: Reject UVD message with invalid number of h265 refs

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 5.6% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-09-07.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-04 17:19Z1 MO AGO

Last updated

2026-09-07 14:21Z1 MO AGO

Reserved

2026-08-26

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-20Improper Input ValidationClass

Data version

5.2

Document digest

45c9b1f9692a2a0825dde22c60dc42d080a2810afd0ff9cb5ce2e717055481e7

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux86fa0bdc6fd7b2debc07ce86f1bcd5fb254822e3 to < 1facad2a78c1a8aeecc36eb4d560c7f1e10ce198, 86fa0bdc6fd7b2debc07ce86f1bcd5fb254822e3 to < 499907e5d46e575e96967c0230a0a6af980a17ab, 86fa0bdc6fd7b2debc07ce86f1bcd5fb254822e3 to < cbf1c84bf5cac2b3742ea3d2085fa713424465cc, 86fa0bdc6fd7b2debc07ce86f1bcd5fb254822e3 to < a930c54cb67200de8bc0de87480d09ece7dcd85d, 86fa0bdc6fd7b2debc07ce86f1bcd5fb254822e3 to < 2abcdc5f738574e7fcdd9417575dffb877fdc26f, 86fa0bdc6fd7b2debc07ce86f1bcd5fb254822e3 to < e304c3e0d9ce251887be1f274aa0ed52219d5fd7, 86fa0bdc6fd7b2debc07ce86f1bcd5fb254822e3 to < 0acdf1a575f59bd46717d5c487d84575af5bee8f, 86fa0bdc6fd7b2debc07ce86f1bcd5fb254822e3 to < 9fca434208f1f9ab977feac62df8ebb1cc7ce893, 4.2—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/1facad2a78c1a8aeecc36eb4d560c7f1e10ce198
git.kernel.orghttps://git.kernel.org/stable/c/499907e5d46e575e96967c0230a0a6af980a17ab
git.kernel.orghttps://git.kernel.org/stable/c/cbf1c84bf5cac2b3742ea3d2085fa713424465cc
git.kernel.orghttps://git.kernel.org/stable/c/a930c54cb67200de8bc0de87480d09ece7dcd85d
git.kernel.orghttps://git.kernel.org/stable/c/2abcdc5f738574e7fcdd9417575dffb877fdc26f
git.kernel.orghttps://git.kernel.org/stable/c/e304c3e0d9ce251887be1f274aa0ed52219d5fd7
git.kernel.orghttps://git.kernel.org/stable/c/0acdf1a575f59bd46717d5c487d84575af5bee8f
git.kernel.orghttps://git.kernel.org/stable/c/9fca434208f1f9ab977feac62df8ebb1cc7ce893

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.107-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.105-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.