---
title: "CVE-2026-89818: Linux Kernel drm/amdgpu/vcn - Integer Overflow"
description: "Linux kernel drm/amdgpu/vcn contains an integer overflow caused by improper dec_msg buffer count check, letting attackers bypass bounds check and cause out-of-bounds access, exploit requires ~4GiB mapping."
url: https://panop.io/threat-heartbeat/CVE-2026-89818/
---

# CVE-2026-89818 Linux Kernel drm/amdgpu/vcn - Integer Overflow

Linux kernel drm/amdgpu/vcn contains an integer overflow caused by improper dec\_msg buffer count check, letting attackers bypass bounds check and cause out-of-bounds access, exploit requires ~4GiB mapping.

CVSS base score 7.1 /10

High

CISA KEV

Not listed

Public exploit

None known

EPSS

0.16% chance of exploitation in 30 days

[View the NVD record ↗](https://nvd.nist.gov/vuln/detail/CVE-2026-89818)

## Details

Type

Integer Overflow

Impact

Denial Of Service

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Published

16 September 2026

Updated

15 October 2026

## Vendor fix

Update to the latest Linux kernel version with the fix for drm/amdgpu/vcn integer overflow.

Patching closes this CVE. It does not tell you which of your systems run the affected version, or what else is exposed alongside them.

## References

- [https://nvd.nist.gov/vuln/detail/CVE-2026-89818](https://nvd.nist.gov/vuln/detail/CVE-2026-89818)
- [https://git.kernel.org/stable/c/c2340281be4ddacb8c203e2bce59b126d1d6c4c8](https://git.kernel.org/stable/c/c2340281be4ddacb8c203e2bce59b126d1d6c4c8)
- [https://git.kernel.org/stable/c/47799e1f893d47d8af231710a61065e3ec8a13e8](https://git.kernel.org/stable/c/47799e1f893d47d8af231710a61065e3ec8a13e8)
- [https://git.kernel.org/stable/c/4d7390530853eb7befda9cc786e4c86e8ad7ac9e](https://git.kernel.org/stable/c/4d7390530853eb7befda9cc786e4c86e8ad7ac9e)
- [https://git.kernel.org/stable/c/6dceaeceaa7c8396339f3ea34b0110cb912ca61b](https://git.kernel.org/stable/c/6dceaeceaa7c8396339f3ea34b0110cb912ca61b)
- [https://git.kernel.org/stable/c/7e28853c78c20bb8ba4c1dba702430cd05e09f76](https://git.kernel.org/stable/c/7e28853c78c20bb8ba4c1dba702430cd05e09f76)
- [https://git.kernel.org/stable/c/9ae19bd60891bea0a7b7504cc8dbfe74570ac3b3](https://git.kernel.org/stable/c/9ae19bd60891bea0a7b7504cc8dbfe74570ac3b3)

[← All CVEs](https://panop.io/threat-heartbeat/)

## What this record can't tell you

- Whether you run the affected software, and where
- Whether an attacker can actually reach and exploit it
- The misconfigurations that never get a CVE number
- What it would cost the business, ranked into what to fix first

Panop answers these inside your environment, for this CVE and every other finding.

[Book a demo](https://panop.io/demo)