CVE-2026-46197 drm/amdkfd: validate SVM ioctl nattr against buffer size

🗓️ 28 May 2026 09:40:13Reported by LinuxType

Linux kernel drm amdkfd validates SVM ioctl nattr against buffer size to prevent out-of-bounds access.

Reporter	Title	Published	Views	Family All 189
ATTACKERKB	CVE-2026-46197	28 May 202609:40	–	attackerkb
CBLMariner	CVE-2026-46197 affecting package kernel for versions less than 6.6.141.1-1	22 Jun 202621:21	–	cbl_mariner
CNNVD	Linux kernel 安全漏洞	28 May 202600:00	–	cnnvd
CVE	CVE-2026-46197	28 May 202609:40	–	cve
Debian CVE	CVE-2026-46197	28 May 202609:40	–	debiancve
EUVD	EUVD-2026-32824	28 May 202609:40	–	euvd
Microsoft CVE	drm/amdkfd: validate SVM ioctl nattr against buffer size	29 May 202608:04	–	mscve
NVD	CVE-2026-46197	28 May 202610:16	–	nvd
OSV	BELL-CVE-2026-46197	2 Jun 202606:11	–	osv
OSV	DEBIAN-CVE-2026-46197	28 May 202610:16	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
      "drivers/gpu/drm/amd/amdkfd/kfd_priv.h"
    ],
    "versions": [
      {
        "version": "42de677f79999791bee4e21be318c32d90ab62c6",
        "lessThan": "daa8bc5f83814b55b71d2b5b3a090d57a5219c21",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "42de677f79999791bee4e21be318c32d90ab62c6",
        "lessThan": "fb07a0c9c8419164812e07274947f11b1d92dd61",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "42de677f79999791bee4e21be318c32d90ab62c6",
        "lessThan": "91c6dc5a41695d02dfc6299f106ac38a6c493e52",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "42de677f79999791bee4e21be318c32d90ab62c6",
        "lessThan": "ccd060b5c7cc75ae7e211c250b97c5b6272e7efc",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "42de677f79999791bee4e21be318c32d90ab62c6",
        "lessThan": "db9530a9873a7c85d2266a922589ebcf427fa631",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "42de677f79999791bee4e21be318c32d90ab62c6",
        "lessThan": "6abd3a4417cb73a7d0db7e25bf11fae1074bdba3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "42de677f79999791bee4e21be318c32d90ab62c6",
        "lessThan": "045e0ff208f0838a246c10204105126611b267a1",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c",
      "drivers/gpu/drm/amd/amdkfd/kfd_priv.h"
    ],
    "versions": [
      {
        "version": "5.14",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.14",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.140",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.90",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.32",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.9",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/045e0ff208f0838a246c10204105126611b267a1
git	www.git.kernel.org/stable/c/fb07a0c9c8419164812e07274947f11b1d92dd61
git	www.git.kernel.org/stable/c/ccd060b5c7cc75ae7e211c250b97c5b6272e7efc
git	www.git.kernel.org/stable/c/daa8bc5f83814b55b71d2b5b3a090d57a5219c21
git	www.git.kernel.org/stable/c/91c6dc5a41695d02dfc6299f106ac38a6c493e52
git	www.git.kernel.org/stable/c/db9530a9873a7c85d2266a922589ebcf427fa631
git	www.git.kernel.org/stable/c/6abd3a4417cb73a7d0db7e25bf11fae1074bdba3

14 Jun 2026 18:01Current

CVSS 3.17.8

EPSS0.00138