CVE-2026-46217
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Avoid overflow on msg bound check As pointed out by SDL, the previous condition may be vulnerable to overflow. (cherry picked from commit 3c5367d950140d4ec7af830b2268a5a6fdaa3885)
Affected versions
Linux kernel versions
7.1-rc1
and later are affected. Fixed in
7.1-rc2
and their respective stable series.
References
The following references provide additional information about CVE-2026-46217 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/271cd5429513ff9b364a9bf8903e5b65b687eb25
-
PatchKernel patch commithttps://git.kernel.org/stable/c/30d12ee310a6024ff4c7b9eafdbbeab2db450d4a
-
PatchKernel patch commithttps://git.kernel.org/stable/c/5bb5faff4837b1d98fd655cf8bd7b5d4da0fc4dc
Frequently asked questions
-
What is CVE-2026-46217?
CVE-2026-46217 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 7.1-rc1 onward and has been patched in 7.1-rc2. CVE-2026-46217 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-46217?
Yes — CVE-2026-46217 has been patched. Fixed versions include 7.1-rc2. If you are running Linux kernel 7.1-rc1 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-46217 actively exploited?
No — CVE-2026-46217 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.