CVE-2026-97428

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/amdgpu component regarding the parsing of Field Replaceable Unit (FRU) Product Information Area (PIA) data. The original implementation used an open-coded Type-Length-Value (TLV) walk, which could lead to out-of-bounds reads when processing truncated or malformed FRU data from the EEPROM. This was addressed by implementing fru pia advance() and fru pia copy field() helpers to ensure every read is bounded by the actual EEPROM data length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.