CVE-2026-93179

A flaw was found in the drm/amd/powerplay component of the Linux kernel. This vulnerability occurs when the VBIOS (Video Basic Input/Output System) provides a malformed VoltageObjectInfo table, which can lead to an infinite loop or an out-of-bounds (OOB) read in the system's memory. This could potentially allow a local attacker to cause a denial of service or disclose sensitive information.

This vulnerability is evaluated as Moderate impact because exploitation requires local access, depends on underlying AMD graphics hardware with manipulated firmware tables, and primarily results in a kernel hang or system crash. Typical server environments lacking AMD graphics adapters are unaffected by this defect. Additionally, this flaw cannot be exploited across the network without existing access to the underlying hardware layer.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.