CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions

CSIRTS triage

What

Missing validation of UVD dimensions in AMD GPU driver allows division by zero.

Who is affected

Systems running affected Linux kernel versions with AMD GPU hardware and UVD enabled.

Urgency

Medium severity (CVSS 5.5) and not exploited; standard update cycle acceptable.

Action

Apply Linux kernel security patch for CVE-2026-68106 or update to patched kernel version.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

Microsoft Security Response Center (INTL · vendor-psirt · site)

Severity

medium — CVSS 5.5

Published

2026-08-11

Exploitation

Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68106

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-681060.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• high[NEW] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
• highCVE-2026-68106: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division b…nvd

More from Microsoft Security Response Center

• highCVE-2026-70130: Microsoft Office Remote Code Execution Vulnerability2026-08-11
• highCVE-2026-70354: .NET Core Remote Code Execution Vulnerability2026-08-11
• highCVE-2026-68792: Microsoft Office Elevation of Privilege Vulnerability2026-08-11
• highCVE-2026-66807: Microsoft Office Graphics Component Remote Code Execution Vulnerability2026-08-11
• highCVE-2026-64909: Microsoft Office Remote Code Execution Vulnerability2026-08-11