CVE-2026-80576

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the drm/amdgpu component, the amdgpu cs p2 ib() function fails to limit user-supplied ib bytes when passing them to ib->length dw. Because ring emit ib() encodes this length into packet fields, oversized values can corrupt adjacent control bits and destabilize command submission. This issue affects GFX rings and other ring types including compute, SDMA, and VPE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.