CVE-2026-68108
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions (e.g. 65536×65536) cause 32-bit integer overflow, wrapping the calculated buffer size to 0. This bypasses validation and allows GPU firmware to perform out-of-bound memory access. The fix uses 64-bit arithmetic to detect overflow and rejects invalid dimensions before they reach the hardware. V2: remove redundant check V3: modify max height value V4: remove size64 (cherry picked from commit cbe408dba581755ad1279a487ec786d8927d778d)
How to fix
- Linux Linux893db20383800cfe92e638705984eebb13bc81a5, a07430abd556de3707adfcadcc60db3fa64e4b2b, a6d7065b91a14790980ce6f4960db0ca8c3c9940, 7eebef042c12dfe0568593ee6a8926d16505925e, 00c311a13d225266800c712f2b7db2711c6897de, 186bfdc4e26d019b2e7570cb121964a1d89b2e5b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f1689ec1b0b1256d0e69653cd4aaeee44aafdf5c ≤ v < 893db20383800cfe92e638705984eebb13bc81a5, f1689ec1b0b1256d0e69653cd4aaeee44aafdf5c ≤ v < a07430abd556de3707adfcadcc60db3fa64e4b2b, f1689ec1b0b1256d0e69653cd4aaeee44aafdf5c ≤ v < a6d7065b91a14790980ce6f4960db0ca8c3c9940, f1689ec1b0b1256d0e69653cd4aaeee44aafdf5c ≤ v < 7eebef042c12dfe0568593ee6a8926d16505925e, f1689ec1b0b1256d0e69653cd4aaeee44aafdf5c ≤ v < 00c311a13d225266800c712f2b7db2711c6897de, f1689ec1b0b1256d0e69653cd4aaeee44aafdf5c ≤ v < 186bfdc4e26d019b2e7570cb121964a1d89b2e5b, 4.2 | 893db20383800cfe92e638705984eebb13bc81a5, a07430abd556de3707adfcadcc60db3fa64e4b2b, a6d7065b91a14790980ce6f4960db0ca8c3c9940, 7eebef042c12dfe0568593ee6a8926d16505925e, 00c311a13d225266800c712f2b7db2711c6897de, 186bfdc4e26d019b2e7570cb121964a1d89b2e5b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.