GPU VulnDB

Database/NVIDIA / GPU stack

Linux amdgpu VCN: integer overflow in dec_msg buffer count lets the parser run past the message BO

CVSS 7.1CVE-2026-89818NVIDIA / GPU stackcurated

Impact

A num_buffers value of 0x3FFFFFFF makes the expression 6 + num_buffers * 4 wrap to 2, so the bounds check passes and the decode-message parser walks far past the end of the message buffer object. On a node with AMD GPUs exposed to tenants this is an out-of-bounds read in kernel context reachable from a process that can submit VCN decode work, with a likely outcome of a kernel oops that takes the node down rather than a clean fault. Triggering it also requires a roughly 4GiB mapping so the earlier header check is satisfied, which limits it to tenants allowed large allocations. Availability is the realistic exposure: a crashed GPU node has to be rebooted, and any co-tenants on that host lose their jobs with it.

Who can reach it

Local, authenticated: a user or container with access to the amdgpu render node that can submit VCN video-decode command streams and allocate a ~4GiB buffer. Not reachable over the network, and not reachable at all on nodes where VCN is not exposed to tenants.

What to do

Pick up the fix from your distribution's stable kernel (the check is rewritten in division form; commits linked below) and reboot each affected node. That means draining GPU workloads per node and rebooting - there is no module-reload shortcut that is safe while tenants hold the render node. Until then, restricting which tenants can reach /dev/dri render nodes on AMD hosts limits who can attempt it.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-89818https://git.kernel.org/stable/c/47799e1f893d47d8af231710a61065e3ec8a13e8https://git.kernel.org/stable/c/4d7390530853eb7befda9cc786e4c86e8ad7ac9ehttps://git.kernel.org/stable/c/9ae19bd60891bea0a7b7504cc8dbfe74570ac3b3

Related entries

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.