CVE-2026-64097 drm/amd/display: Validate GPIO pin LUT table size before iterating
An out-of-bounds read in the AMD display driver allows attackers to read memory or cause a crash via a malformed VBIOS table.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-64097?
CVE-2026-64097 is a high-severity memory corruption vulnerability in Linux kernel, published on 19 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Validate GPIO pin LUT table size before iterating
[Why&How] The GPIO pin table parsers in get_gpio_i2c_info() and bios_parser_get_gpio_pin_info() derive an element count from the VBIOS table_header.structuresize field, then iterate over gpio_pin[] entries. However, GET_IMAGE() only validates that the table header itself fits within the BIOS image. If the VBIOS reports a structuresize larger than the actual mapped data, the loop reads past the end of the BIOS image, causing an out-of-bounds read.
Fix this by calling bios_get_image() to validate that the full claimed structuresize is accessible within the BIOS image before entering the loop in both functions.
(cherry picked from commit ba5e95b43b773ae1bf1f66ee6b31eb774e65afe3)
Which versions are affected by CVE-2026-64097?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-64097?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-64097 being exploited?
There is no known exploitation of CVE-2026-64097 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-92760, BELL-CVE-2026-64097, DEBIAN-CVE-2026-64097, GHSA-78vx-v25w-4237, ROOT-OS-DEBIAN-11-CVE-2026-64097, ROOT-OS-UBUNTU-2204-CVE-2026-64097 and 1 more.