CVE-2026-80540 (CVSS 7.8)

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. (cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304)

Is your site exposed to CVE-2026-80540?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0018

Probability of exploitation

0.06%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/25ee120f3803ad9e416ef9f76f4c3234cc4d645b https://git.kernel.org/stable/c/271a7da84a6262a09de549912dcf6a749d169cb6 https://git.kernel.org/stable/c/5cbd8af02b0b9c8723fa30edcf6fccab5170af8d https://git.kernel.org/stable/c/60539d517e8439621532d8c01091ac049c596b4b https://git.kernel.org/stable/c/b7549e3f96c78921751c4b3e69af729662130d83 https://git.kernel.org/stable/c/b8bb9ba3f101a1b0011f785a577a4a0a38371174 https://git.kernel.org/stable/c/bc7397a033ac52f6d8c9bb6510d61694b2a3fce7 https://git.kernel.org/stable/c/d058f7a6709441afe1784eecd8c0643dd84750bc

Frequently Asked Questions

What is CVE-2026-80540? +

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. (cherry picked from commit b41c8cb12e202b220353332ab87dc01a11f69304) It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-80540? +

CVE-2026-80540 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0018, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-80540? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-80540