🟡 Medium | Source: Microsoft Security Response Center
CVE-2026-64097 is a vulnerability in the AMD display driver subsystem (drm/amd/display) within the Linux kernel, relating to a missing bounds check on a GPIO pin Look-Up Table (LUT) before iteration. Without proper validation of the table size, out-of-bounds memory access could occur, potentially leading to information disclosure or system instability. This affects Linux-based environments, including Azure virtual machines and services running Linux with AMD GPU drivers.
Security Architect’s Take: Architects running Linux VMs on Azure with AMD GPU-equipped SKUs should ensure host and guest OS kernel patches are applied promptly once available; review your VM update policies and consider enabling automatic kernel patching via Azure Update Manager for affected workloads.
Original advisory: CVE-2026-64097 drm/amd/display: Validate GPIO pin LUT table size before iterating