High severity8.8NVD Advisory· Published Aug 10, 2026· Updated Oct 19, 2026
CVE-2026-68108
CVE-2026-68108
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/vce: fix integer overflow in image size
Fix a security vulnerability where malicious VCE command streams with oversized dimensions (e.g. 65536×65536) cause 32-bit integer overflow, wrapping the calculated buffer size to 0. This bypasses validation and allows GPU firmware to perform out-of-bound memory access.
The fix uses 64-bit arithmetic to detect overflow and rejects invalid dimensions before they reach the hardware.
V2: remove redundant check V3: modify max height value V4: remove size64
(cherry picked from commit cbe408dba581755ad1279a487ec786d8927d778d)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
91- osv-coords90 versionspkg:linux/kernelpkg:rpm/almalinux/bpftoolpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-modules-extra-matchedpkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/rvpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0
>= 4.2.0, < 6.1.183+ 89 more
- (no CPE)range: >= 4.2.0, < 6.1.183
- (no CPE)range: < 4.18.0-553.173.1.el8_10
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-211.60.1.el10_2
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1.160000.2.22
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/00c311a13d225266800c712f2b7db2711c6897denvd
- git.kernel.org/stable/c/186bfdc4e26d019b2e7570cb121964a1d89b2e5bnvd
- git.kernel.org/stable/c/7eebef042c12dfe0568593ee6a8926d16505925envd
- git.kernel.org/stable/c/893db20383800cfe92e638705984eebb13bc81a5nvd
- git.kernel.org/stable/c/a07430abd556de3707adfcadcc60db3fa64e4b2bnvd
- git.kernel.org/stable/c/a6d7065b91a14790980ce6f4960db0ca8c3c9940nvd
News mentions
0No linked articles in our index yet.