CVE-2026-46230

A flaw was found in the Linux kernel's drm/amdgpu/vcn3 component. This vulnerability, an Out-of-Bounds (OOB) read, occurs when parsing decoder messages without proper boundary checks. A local attacker could potentially exploit this to read sensitive information from memory or cause system instability, leading to a denial of service.

This vulnerability is evaluated as having Moderate impact for Red Hat Enterprise Linux because successful exploitation requires local user access and is restricted to systems equipped with AMD GPU hardware utilizing VCN 3.0. In typical enterprise server and cloud deployments where dedicated AMD graphical accelerators are absent, the vulnerable driver code is not loaded or exposed. On systems where affected hardware is present, an attacker must interact directly with the GPU rendering interface to trigger out-of-bounds memory reads, limiting the blast radius to local denial of service or information leakage.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.