SUSE CVE-2026-98905

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...

CVE-2026-98905

A flaw was found in the Linux kernel's AMD GPU driver. This vulnerability allows a local user to cause a denial of service DoS and crash the system during Checkpoint/Restore In Userspace CRIU operations. The issue occurs because the driver fails to properly acquire and initialize queue buffers wh...

DEBIAN-CVE-2026-98905

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...

CVE-2026-98905

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...

UBUNTU-CVE-2026-98905

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...

CVE-2026-98905

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...

CVE-2026-98905 drm/amdkfd: Properly acquire queue buffers in CRIU restore

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...

EUVD-2026-108861

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...

CVE-2026-98905 drm/amdkfd: Properly acquire queue buffers in CRIU restore

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...

CVE-2026-98905

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu was missed. Thus, setqueuepropertiesfromcriu is not filling out the...

CVE-2026-98905

The Linux kernel contains a vulnerability in the drm/amdkfd component related to CRIU restore operations. When the function kfd_queue_acquire_buffers() was separated from set_queue_properties_from_user(), the set_queue_properties_from_criu() function was not updated to include the necessary calls...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.12.111 and prior to 6.18.53. This vulnerability arises because setqueuepropertiesfromcriu fails to call kfdqueueacquirebuffers to populate the buffer fields of queueproperties during CRIU recovery. Subsequent code assumes these...

PT-2026-121875

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfd queue acquire buffers was split off from set queue properties from user, set queue properties from criu was missed. Thus, set queue properties from criu is not...

Linux Distros Unpatched Vulnerability : CVE-2026-98905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfdqueueacquirebuffers was split off from setqueuepropertiesfromuser, setqueuepropertiesfromcriu...

CVE-2026-89807

A flaw was found in the Linux kernel's drm/amdkfd component. A local user with CAPCHECKPOINTRESTORE capabilities could trigger a kernel NULL pointer dereference by issuing a crafted queue restore object during a CRIU Checkpoint/Restore in User-space operation. This vulnerability could lead to a...

CVE-2026-80870

A flaw was found in the Linux kernel's drm/amdkfd component. A local user could provide a specially crafted ID during the Checkpoint/Restore in Userspace CRIU restore process. If this restored ID is larger than the maximum integer value INTMAX, it can trigger a kernel warning. This warning may le...

EUVD-2026-97820

containerd CRI plugin: Checkpoint restore bypasses destination security context...

containerd CRI plugin: Checkpoint restore bypasses destination security context

Impact A vulnerability in containerd's CRI implementation allows a container restored from an untrusted checkpoint via the CreateContainer API to bypass the destination security context and execute with elevated privileges. When restoring a container from a checkpoint archive or annotated OCI...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: hold eventmutex while checkpointing CRIU events kfdcriucheckpointevents counts the entries in p-eventidr via kfdgetnumevents, allocates an array sized to that count, and then walks the same IDR to fill it. Neither the...

UBUNTU-CVE-2026-95837

containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...