GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-46276 (GCVE-0-2026-46276)

Vulnerability from cvelistv5 – Published: 2026-06-08 15:41 – Updated: 2026-06-14 18:05
VLAI
Title
drm/amdgpu: fix zero-size GDS range init on RDNA4
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix zero-size GDS range init on RDNA4 RDNA4 (GFX 12) hardware removes the GDS, GWS, and OA on-chip memory resources. The gfx_v12_0 initialisation code correctly leaves adev->gds.gds_size, adev->gds.gws_size, and adev->gds.oa_size at zero to reflect this. amdgpu_ttm_init() unconditionally calls amdgpu_ttm_init_on_chip() for each of these resources regardless of size. When the size is zero, amdgpu_ttm_init_on_chip() forwards the call to ttm_range_man_init(), which calls drm_mm_init(mm, 0, 0). drm_mm_init() immediately fires DRM_MM_BUG_ON(start + size <= start) -- trivially true when size is zero -- crashing the kernel during modprobe of amdgpu on an RX 9070 XT. Guard against this by returning 0 early from amdgpu_ttm_init_on_chip() when size_in_page is zero. This skips TTM resource manager registration for hardware resources that are absent, without affecting any other GPU type. DRM_MM_BUG_ON() only asserts if CONFIG_DRM_DEBUG_MM is enabled in the kernel config. This is apparently rarely enabled as these chips have been in the market for over a year and this issue was only reported now. Oops-Analysis: http://oops.fenrus.org/reports/bugzilla.korg/221376/report.html (cherry picked from commit 5719ce5865279cad4fd5f01011fe037168503f2d)
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: c832c346cdf9022872655be621880e0f66f4135d , < 1f5d33e7b0a9a2a140f46e22fb52eede323c5946 (git)
Affected: c832c346cdf9022872655be621880e0f66f4135d , < 9bc925759c05feae7dfa9570e77131d54729c8ea (git)
Affected: c832c346cdf9022872655be621880e0f66f4135d , < 36f9602fb22ede69fcc8b422be0cf8105bf655ad (git)
Affected: c832c346cdf9022872655be621880e0f66f4135d , < be0376affcafa0bbb371bb501579a825eae32281 (git)
Affected: c832c346cdf9022872655be621880e0f66f4135d , < 0e21db1a77967bc15df662efdca8ea8a61d124ea (git)
Affected: c832c346cdf9022872655be621880e0f66f4135d , < 30c000a49094ec568c9b51b7421f7a4a3f0b0298 (git)
Affected: c832c346cdf9022872655be621880e0f66f4135d , < 3e26c76891ab99fa173e9c501119fbb5c9f4600f (git)
Affected: c832c346cdf9022872655be621880e0f66f4135d , < 095a8b0ad3c3b5cdc3850d961adb8a8f735220bb (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.20
Unaffected: 0 , < 4.20 (semver)
Unaffected: 5.10.258 , ≤ 5.10.* (semver)
Unaffected: 5.15.209 , ≤ 5.15.* (semver)
Unaffected: 6.1.175 , ≤ 6.1.* (semver)
Unaffected: 6.6.140 , ≤ 6.6.* (semver)
Unaffected: 6.12.86 , ≤ 6.12.* (semver)
Unaffected: 6.18.27 , ≤ 6.18.* (semver)
Unaffected: 7.0.4 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1f5d33e7b0a9a2a140f46e22fb52eede323c5946",
              "status": "affected",
              "version": "c832c346cdf9022872655be621880e0f66f4135d",
              "versionType": "git"
            },
            {
              "lessThan": "9bc925759c05feae7dfa9570e77131d54729c8ea",
              "status": "affected",
              "version": "c832c346cdf9022872655be621880e0f66f4135d",
              "versionType": "git"
            },
            {
              "lessThan": "36f9602fb22ede69fcc8b422be0cf8105bf655ad",
              "status": "affected",
              "version": "c832c346cdf9022872655be621880e0f66f4135d",
              "versionType": "git"
            },
            {
              "lessThan": "be0376affcafa0bbb371bb501579a825eae32281",
              "status": "affected",
              "version": "c832c346cdf9022872655be621880e0f66f4135d",
              "versionType": "git"
            },
            {
              "lessThan": "0e21db1a77967bc15df662efdca8ea8a61d124ea",
              "status": "affected",
              "version": "c832c346cdf9022872655be621880e0f66f4135d",
              "versionType": "git"
            },
            {
              "lessThan": "30c000a49094ec568c9b51b7421f7a4a3f0b0298",
              "status": "affected",
              "version": "c832c346cdf9022872655be621880e0f66f4135d",
              "versionType": "git"
            },
            {
              "lessThan": "3e26c76891ab99fa173e9c501119fbb5c9f4600f",
              "status": "affected",
              "version": "c832c346cdf9022872655be621880e0f66f4135d",
              "versionType": "git"
            },
            {
              "lessThan": "095a8b0ad3c3b5cdc3850d961adb8a8f735220bb",
              "status": "affected",
              "version": "c832c346cdf9022872655be621880e0f66f4135d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.175",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.27",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.258",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.175",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.86",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.27",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.4",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix zero-size GDS range init on RDNA4\n\nRDNA4 (GFX 12) hardware removes the GDS, GWS, and OA on-chip memory\nresources. The gfx_v12_0 initialisation code correctly leaves\nadev-\u003egds.gds_size, adev-\u003egds.gws_size, and adev-\u003egds.oa_size at\nzero to reflect this.\n\namdgpu_ttm_init() unconditionally calls amdgpu_ttm_init_on_chip() for\neach of these resources regardless of size. When the size is zero,\namdgpu_ttm_init_on_chip() forwards the call to ttm_range_man_init(),\nwhich calls drm_mm_init(mm, 0, 0). drm_mm_init() immediately fires\nDRM_MM_BUG_ON(start + size \u003c= start) -- trivially true when size is\nzero -- crashing the kernel during modprobe of amdgpu on an RX 9070 XT.\n\nGuard against this by returning 0 early from\namdgpu_ttm_init_on_chip() when size_in_page is zero. This skips TTM\nresource manager registration for hardware resources that are absent,\nwithout affecting any other GPU type.\n\nDRM_MM_BUG_ON() only asserts if CONFIG_DRM_DEBUG_MM is enabled in\nthe kernel config.  This is apparently rarely enabled as these chips\nhave been in the market for over a year and this issue was only reported\nnow.\n\nOops-Analysis: http://oops.fenrus.org/reports/bugzilla.korg/221376/report.html\n(cherry picked from commit 5719ce5865279cad4fd5f01011fe037168503f2d)"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-14T18:05:43.582Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1f5d33e7b0a9a2a140f46e22fb52eede323c5946"
        },
        {
          "url": "https://git.kernel.org/stable/c/9bc925759c05feae7dfa9570e77131d54729c8ea"
        },
        {
          "url": "https://git.kernel.org/stable/c/36f9602fb22ede69fcc8b422be0cf8105bf655ad"
        },
        {
          "url": "https://git.kernel.org/stable/c/be0376affcafa0bbb371bb501579a825eae32281"
        },
        {
          "url": "https://git.kernel.org/stable/c/0e21db1a77967bc15df662efdca8ea8a61d124ea"
        },
        {
          "url": "https://git.kernel.org/stable/c/30c000a49094ec568c9b51b7421f7a4a3f0b0298"
        },
        {
          "url": "https://git.kernel.org/stable/c/3e26c76891ab99fa173e9c501119fbb5c9f4600f"
        },
        {
          "url": "https://git.kernel.org/stable/c/095a8b0ad3c3b5cdc3850d961adb8a8f735220bb"
        }
      ],
      "title": "drm/amdgpu: fix zero-size GDS range init on RDNA4",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46276",
    "datePublished": "2026-06-08T15:41:18.672Z",
    "dateReserved": "2026-05-13T15:03:33.109Z",
    "dateUpdated": "2026-06-14T18:05:43.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-46276",
      "date": "2026-09-15",
      "epss": "0.00123",
      "percentile": "0.02338"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-46276\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-06-08T17:16:45.103\",\"lastModified\":\"2026-07-23T07:10:00.113\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amdgpu: fix zero-size GDS range init on RDNA4\\n\\nRDNA4 (GFX 12) hardware removes the GDS, GWS, and OA on-chip memory\\nresources. The gfx_v12_0 initialisation code correctly leaves\\nadev-\u003egds.gds_size, adev-\u003egds.gws_size, and adev-\u003egds.oa_size at\\nzero to reflect this.\\n\\namdgpu_ttm_init() unconditionally calls amdgpu_ttm_init_on_chip() for\\neach of these resources regardless of size. When the size is zero,\\namdgpu_ttm_init_on_chip() forwards the call to ttm_range_man_init(),\\nwhich calls drm_mm_init(mm, 0, 0). drm_mm_init() immediately fires\\nDRM_MM_BUG_ON(start + size \u003c= start) -- trivially true when size is\\nzero -- crashing the kernel during modprobe of amdgpu on an RX 9070 XT.\\n\\nGuard against this by returning 0 early from\\namdgpu_ttm_init_on_chip() when size_in_page is zero. This skips TTM\\nresource manager registration for hardware resources that are absent,\\nwithout affecting any other GPU type.\\n\\nDRM_MM_BUG_ON() only asserts if CONFIG_DRM_DEBUG_MM is enabled in\\nthe kernel config.  This is apparently rarely enabled as these chips\\nhave been in the market for over a year and this issue was only reported\\nnow.\\n\\nOops-Analysis: http://oops.fenrus.org/reports/bugzilla.korg/221376/report.html\\n(cherry picked from commit 5719ce5865279cad4fd5f01011fe037168503f2d)\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\ndrm/amdgpu: corrige la inicializaci\u00f3n de rango GDS de tama\u00f1o cero en RDNA4\\n\\nEl hardware RDNA4 (GFX 12) elimina los recursos de memoria en chip GDS, GWS y OA. El c\u00f3digo de inicializaci\u00f3n gfx_v12_0 deja correctamente adev-\u003egds.gds_size, adev-\u003egds.gws_size y adev-\u003egds.oa_size en cero para reflejar esto.\\n\\namdgpu_ttm_init() llama incondicionalmente a amdgpu_ttm_init_on_chip() para cada uno de estos recursos, independientemente del tama\u00f1o. Cuando el tama\u00f1o es cero, amdgpu_ttm_init_on_chip() reenv\u00eda la llamada a ttm_range_man_init(), que llama a drm_mm_init(mm, 0, 0). drm_mm_init() dispara inmediatamente DRM_MM_BUG_ON(start + size \u003c= start) -- trivialmente cierto cuando el tama\u00f1o es cero -- lo que provoca el fallo del kernel durante el modprobe de amdgpu en una RX 9070 XT.\\n\\nSe evita esto devolviendo 0 anticipadamente desde amdgpu_ttm_init_on_chip() cuando size_in_page es cero. Esto omite el registro del gestor de recursos TTM para los recursos de hardware que est\u00e1n ausentes, sin afectar a ning\u00fan otro tipo de GPU.\\n\\nDRM_MM_BUG_ON() solo se activa si CONFIG_DRM_DEBUG_MM est\u00e1 habilitado en la configuraci\u00f3n del kernel. Esto aparentemente rara vez est\u00e1 habilitado, ya que estos chips han estado en el mercado durante m\u00e1s de un a\u00f1o y este problema solo se inform\u00f3 ahora.\\n\\nAn\u00e1lisis de Oops: http://oops.fenrus.org/reports/bugzilla.korg/221376/report.html\\n(seleccionado de la confirmaci\u00f3n 5719ce5865279cad4fd5f01011fe037168503f2d)\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"c832c346cdf9022872655be621880e0f66f4135d\",\"lessThan\":\"1f5d33e7b0a9a2a140f46e22fb52eede323c5946\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c832c346cdf9022872655be621880e0f66f4135d\",\"lessThan\":\"9bc925759c05feae7dfa9570e77131d54729c8ea\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c832c346cdf9022872655be621880e0f66f4135d\",\"lessThan\":\"36f9602fb22ede69fcc8b422be0cf8105bf655ad\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c832c346cdf9022872655be621880e0f66f4135d\",\"lessThan\":\"be0376affcafa0bbb371bb501579a825eae32281\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c832c346cdf9022872655be621880e0f66f4135d\",\"lessThan\":\"0e21db1a77967bc15df662efdca8ea8a61d124ea\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c832c346cdf9022872655be621880e0f66f4135d\",\"lessThan\":\"30c000a49094ec568c9b51b7421f7a4a3f0b0298\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c832c346cdf9022872655be621880e0f66f4135d\",\"lessThan\":\"3e26c76891ab99fa173e9c501119fbb5c9f4600f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c832c346cdf9022872655be621880e0f66f4135d\",\"lessThan\":\"095a8b0ad3c3b5cdc3850d961adb8a8f735220bb\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.20\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.258\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.175\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.140\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.86\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.27\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0.4\",\"lessThanOrEqual\":\"7.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.10.258\",\"matchCriteriaId\":\"719A9C48-4A93-46A1-8B53-2D668FEF05E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.209\",\"matchCriteriaId\":\"919C10A9-7951-4A74-BADD-C135A0A8D8B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.175\",\"matchCriteriaId\":\"92385813-D91D-480D-83A1-F423D2CBB2BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.140\",\"matchCriteriaId\":\"A1A92866-F406-43B5-B2D1-CFC274753E9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.86\",\"matchCriteriaId\":\"55DA1C62-9991-451E-B8A8-E0004E00F789\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.27\",\"matchCriteriaId\":\"A10AC84F-C058-47D5-85B4-E6E51A613B74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"7.0.4\",\"matchCriteriaId\":\"CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1EF7059-E670-45F4-B422-54C40FA86390\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/095a8b0ad3c3b5cdc3850d961adb8a8f735220bb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/0e21db1a77967bc15df662efdca8ea8a61d124ea\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1f5d33e7b0a9a2a140f46e22fb52eede323c5946\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/30c000a49094ec568c9b51b7421f7a4a3f0b0298\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/36f9602fb22ede69fcc8b422be0cf8105bf655ad\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3e26c76891ab99fa173e9c501119fbb5c9f4600f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9bc925759c05feae7dfa9570e77131d54729c8ea\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/be0376affcafa0bbb371bb501579a825eae32281\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-01T13:33:47+00:00",
      "cve": "CVE-2026-46276",
      "id": "CVE-2026-46276",
      "initial_release_date": "2026-06-08T00:00:00+00:00",
      "product_status:known_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: drm/amdgpu: fix zero-size GDS range init on RDNA4",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46276.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T16:53:15Z",
      "cve": "CVE-2026-46276",
      "id": "CVE-2026-46276",
      "initial_release_date": "2026-06-09T02:21:15Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "528",
      "product_status:known_not_affected": "202",
      "product_status:recommended": "254",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-46276",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46276.json",
      "version": "9"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.