Junglewise Threat Intelligence

CVE-2026-53136: Linux Kernel AMD Display Driver heap overflow in VBIOS parser

CVE-2026-53136 · Severity: info · CVSS 0 · Published 2026-06-25

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's AMD display driver could allow a malformed video BIOS (VBIOS) to cause a system crash or potentially execute unauthorized code. This occurs when the driver reads configuration data from the hardware's firmware without properly verifying its size, leading to memory corruption during the system startup or hardware detection process. Exploiting this would typically require the ability to modify the physical firmware on the device.

Technical details

A heap-based buffer overflow exists in the AMD display driver (drm/amd/display) within the Linux kernel. The vulnerability is located in the BIOS parser component (bios_parser2.c), specifically within the get_integrated_info_v11() and get_integrated_info_v2_1() functions. The driver fails to validate the 'HdmiRegNum' and 'Hdmi6GRegNum' fields from the VBIOS integrated info tables before using them as loop bounds for copying I2C register settings into fixed-size arrays. An attacker providing a malformed VBIOS could specify values exceeding the destination array sizes (9 and 3 elements respectively), resulting in an out-of-bounds heap write during the driver probe sequence. This has been mitigated by clamping the register counts to the destination array sizes using min_t().

Affected products

  • Linux Linux Kernel versions before 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36

Timeline

  • 2026-06-25: advisory: CVE-2026-53136 published by NVD
  • 2026-06-19: patched: Fix committed to stable kernel trees

References

Related threats