Strix
63.5K

CVE-2026-93177

HIGHCVSS 7.3/10

Last modified

CVE-2026-93177 is a high-severity vulnerability rated 7.3/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc, vddci and vddmem lookup tables without bounds checks across nine sites. Return -EINVAL when any index is out of range..

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc, vddci and vddmem lookup tables without bounds checks across nine sites. Return -EINVAL when any index is out of range.

Metrics

CVSS 3.1
7.3/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f83a9991648bb4023a53104db699e99305890d51, < 206e478810d6af50b25d8da72e3af8d55a014365; >= f83a9991648bb4023a53104db699e99305890d51, < 25dedc13ceb9b6109c79c92a726ca4ca017c9eaa; >= f83a9991648bb4023a53104db699e99305890d51, < ae25c92d91f2cb90ede2b0eb0f58efa82ccc718b; >= f83a9991648bb4023a53104db699e99305890d51, < b349dcf061a6dc8c6cef9a10530331ef2ff66c72; >= f83a9991648bb4023a53104db699e99305890d51, < dfe89f1a0c7f40ef858b93881198f9728df956cf; >= f83a9991648bb4023a53104db699e99305890d51, < 46d27e56dbd6345b9c7b62b67ec57407bf3bf29a; >= f83a9991648bb4023a53104db699e99305890d51, < 06aef6dcc1d52da5112cbcde39c062e493247ab5; >= f83a9991648bb4023a53104db699e99305890d51, < 6fa33f594e46e775a94097f71b486d7b006b6917
LinuxLinux4.12

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-93177?
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup vddInd, vddciInd and mvddInd from VBIOS-parsed tables index into vddc, vddci and vddmem lookup tables without bounds checks across nine sites. Return -EINVAL when any index is out of range.
How severe is CVE-2026-93177?
CVE-2026-93177 has a CVSS score of 7.3/10 (HIGH severity).
How do I fix CVE-2026-93177?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-93177?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST