CVE-2026-97494

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/amdgpu component where the fw pri buf (PSP private buffer) was handled using open-coded memset and memcpy operations without proper validation. The fix involves implementing the psp copy fw() function to validate that the image size is not zero and does not exceed the 1 MiB limit of the PSP private buffer, and ensuring that drm dev enter() succeeds before proceeding.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.