CVE-2026-53136

A flaw was found in the Linux kernel's AMD display driver. This vulnerability occurs when the driver processes malformed VBIOS (Video Basic Input/Output System) data. Specifically, unvalidated register counts in the VBIOS can lead to an out-of-bounds memory write during the driver's initialization. This memory corruption could allow an attacker with local access to potentially cause a system crash (denial of service) or execute arbitrary code.

This vulnerability is rated as an Important severity impact because memory corruption in kernel space can lead to privilege escalation or complete denial of service. Exploitation requires environments with AMD graphics hardware where the firmware or VBIOS can be tampered with, or virtualized guest configurations using AMD GPU passthrough with a crafted VBIOS image. Typical enterprise server installations without AMD display hardware or untrusted firmware images are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.