Linux Distros Unpatched Vulnerability : CVE-2026-80703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Fix missing authorization check in KFDIOCDBGTRAPDISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/k...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Clamp the BO size of the CRIU control stack checkpoint copy. CRIU checkpoint copies the MQD control stack using cphqdcntlstacksize from the hardware, without bounding it to the allocated BO region. If the HW field is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdkfd: Always resumeall after suspendall. It is necessary to restore any valid queues, even if the suspendall failed for some. Always execute removequeue, as this will schedule a GPU reset to remove the failed queue. V2:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fixed an uint32 overflow in the EOP ring buffer size alignment. eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers, the expected EOP buffer size is calculated as ALIGNeopringbuffersize,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fixed a 32-bit overflow in the calculation of the total CWSR size. The totalcwsrsize was calculated using a 32-bit value before being used as the allocation size for BO/SVM operations. When the ctxsaverestoreareasize...

The vulnerability of components related to DRM/AMDKFD in Linux kernel components, which allows a hacker to trigger a service failure.

The vulnerability of DRM/AMDKFD components in Linux operating systems is related to the lack of data type conversion mechanisms. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2026-74447

A flaw was found in the Linux kernel's drm/amdkfd component. An integer overflow vulnerability exists when aligning the End-of-Pipe EOP ring buffer size. A local attacker could exploit this by providing a specially crafted size that, due to a 32-bit integer overflow, causes the system to bypass...

CVE-2026-74446

A flaw was found in the drm/amdkfd component of the Linux kernel. A race condition exists in the kfdcriucheckpointevents function where a mutex is not consistently held during event checkpointing. This allows a local attacker to cause memory corruption, potentially leading to privilege escalation...

SUSE CVE-2026-68258

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the values provided in the private data in kfd CRIU restore were within bounds. For queue type, add a KFDQUEUETYPEMAX and ensure the...

SUSE CVE-2026-68259

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()

A flaw was found in the Linux kernel's drm/amdkfd component. An unprivileged local user can exploit an out-of-bounds write vulnerability in the kfdeventpageset function. This occurs because the function writes data without properly validating the buffer size, allowing a small buffer to trigger a...

CVE-2026-72449

A flaw was found in the Linux kernel's drm/amdkfd component. An unprivileged render-group user can exploit this vulnerability via /dev/kfd by repeatedly calling AMDKFDIOCCRIUOP. This leads to a use-after-free and double-free condition due to improper list handling during cleanup. Successful...

CVE-2026-74353

A flaw was found in the drm/amdkfd component of the Linux kernel. This vulnerability occurs when the system fails to properly resume all queues after a suspend operation, even if some suspend operations fail. An attacker could potentially exploit this by triggering a scenario where queue removal...

CVE-2026-74448

A flaw was found in the Linux kernel's drm/amdkfd component. When a process attempts to create its first queue, a failure in memory allocation can cause the pqmcreatequeue function to exit prematurely without releasing a reserved Queue ID QID bit. This leads to a permanent leak of QID slots. Over...

Linux Distros Unpatched Vulnerability : CVE-2026-74353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the...

kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()

A flaw was found in the Linux kernel's drm/amdkfd component. An unprivileged local user can exploit an out-of-bounds write vulnerability in the kfdeventpageset function. This occurs because the function writes data without properly validating the buffer size, allowing a small buffer to trigger a...

CVE-2026-74448

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix QID bit leak in pqmcreatequeue When MES is enabled and amdgpuamdkfdallockernelmem fails during the first queue creation for a process, pqmcreatequeue returns early via 'return retval' without going through the...

CVE-2026-74446

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: hold eventmutex while checkpointing CRIU events kfdcriucheckpointevents counts the entries in p-eventidr via kfdgetnumevents, allocates an array sized to that count, and then walks the same IDR to fill it. Neither the...

CVE-2026-74448 drm/amdkfd: fix QID bit leak in pqm_create_queue()

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix QID bit leak in pqmcreatequeue When MES is enabled and amdgpuamdkfdallockernelmem fails during the first queue creation for a process, pqmcreatequeue returns early via 'return retval' without going through the...

EUVD-2026-59755

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix QID bit leak in pqmcreatequeue When MES is enabled and amdgpuamdkfdallockernelmem fails during the first queue creation for a process, pqmcreatequeue returns early via 'return retval' without going through the...