CVE-2026-97494 drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
A missing size validation in the AMD GPU PSP firmware copy routine allows local attackers to trigger buffer overflows, potentially leading to system crashes or code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-97494?
CVE-2026-97494 is a vulnerability in Linux, published on 24 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw
Change psp_copy_fw from void to int: return -ENODEV when drm_dev_enter fails, and -EINVAL when the image size is zero or larger than the 1 MiB PSP private buffer.
Replace open-coded memset/memcpy into fw_pri_buf with psp_copy_fw.
Which versions are affected by CVE-2026-97494?
How do I fix CVE-2026-97494?
Apply the vendor's patch.
Is CVE-2026-97494 being exploited?
There is no known exploitation of CVE-2026-97494 in the wild and no public exploit code.
Sources
Also known as AZL-103643, BELL-CVE-2026-97494, DEBIAN-CVE-2026-97494, GHSA-gjv4-hxx3-7w8g, UBUNTU-CVE-2026-97494.