Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Azure kernel 6.6.157.1-1 may read beyond hardware data
published 1 month ago
Summary
The Azure-provided Linux kernel version 6.6.157.1-1 had a coding mistake that could let it read past the end of certain hardware information, potentially causing a crash or other unexpected behavior. The issue has been fixed by adding checks that keep reads within the actual data size. Apply the latest kernel update from Azure to ensure the fix is in place.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kernel | <= 6.6.157.1-1 |
Original advisory text
CVE-2026-97428 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: harden FRU PIA parsing with bounded helpers
Replace the open-coded TLV walk with fru_pia_advance()
and fru_pia_copy_field() helpers that bound every read
by the actual EEPROM data length, preventing out-of-bounds
reads on truncated or malformed FRU data.
drm/amdgpu: harden FRU PIA parsing with bounded helpers
Replace the open-coded TLV walk with fru_pia_advance()
and fru_pia_copy_field() helpers that bound every read
by the actual EEPROM data length, preventing out-of-bounds
reads on truncated or malformed FRU data.
References
Timeline
Published24 Sep 2026
Updated30 Sep 2026
First seen30 Sep 2026
Sources
AZL-103745 · OSV
Track software like this
Free during beta