Def1nit3lyN0tAJa1lbr3akTool

Def1nit3lyN0tAJa1lbr3akTool A jailbreak tool for iOS 16.0 to iOS 16.6.1. I built it just for fun. This could not have been possible without kfd, kfund, Dopamine and the jailbreak community. How to build Run TRUSTCACHEVERSION=1 make in every subdirectory of basebin/ if you are building for iOS 15....

kfd

Quick disclaimer: I have no intention of adding offsets for other devices and iOS versions. kfd kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices. It leverages various vulnerabilities that can be exploited to obtain dangling PTEs, which will be...

CVE-2024-26817-amdkfd

-- CVE-2024-26817 I found a security vulnerability in AMD KFD in the following file drivers/gpu/drm/amd/amdkfd/kfdchardev.c, the ioctl identifier is AMDKFDIOCGETPROCESSAPERTURESNEW. In the function kfdioctlgetprocessaperturesnew, the user-provided data of args-numofnodes will be multiplied and...

CVE-2026-98178 drm/amdgpu: Skip KFD mapping clear before initialization

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpuamdkfdclearkfdmapping assumes that a non-NULL kfddev has a fully populated node array. This is not true when KFD device initialization fails after probe. For example,...

EUVD-2026-93106

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpuamdkfdclearkfdmapping assumes that a non-NULL kfddev has a fully populated node array. This is not true when KFD device initialization fails after probe. For example,...

CVE-2026-98178 drm/amdgpu: Skip KFD mapping clear before initialization

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpuamdkfdclearkfdmapping assumes that a non-NULL kfddev has a fully populated node array. This is not true when KFD device initialization fails after probe. For example,...

CVE-2026-98178

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpuamdkfdclearkfdmapping assumes that a non-NULL kfddev has a fully populated node array. This is not true when KFD device initialization fails after probe. For example,...

CVE-2026-98178

The Linux kernel contains a vulnerability in the drm/amdgpu driver where the function amdgpu_amdkfd_clear_kfd_mapping() incorrectly assumes a non-NULL kfd_dev has a fully populated node array. This issue occurs when KFD device initialization fails after the probe phase, specifically on Polaris sy...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fixed an out-of-bounds write in kfdeventpageset. The kfdeventpageset function writes KFDSIGNALEVENTLIMIT 8 bytes via memset, without checking the buffer size parameter. This allows unprivileged userspace to trigger an...

CVE-2026-97429

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver subsystem. A race condition occurs during queue destruction when internal locks are released while waiting for a queue to resume, allowing a concurrent destroy operation to prematurely free the queue object. A local user could...

PT-2026-98056

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the drm/amdkfd component where the kfd smi ev enabled function skips the suser privilege check when the pid variable is 0. This allows any user in the rende...

DEBIAN-CVE-2026-89809

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix scope of mqdmgr dereference in pqmdebugfsmqds Reading /sys/kernel/debug/kfd/mqds while a process holds an active KFD queue triggers a NULL pointer dereference because the for loop that calls mqdmgr-debugfsshowmqd ...

CVE-2026-89809

CVE-2026-89809 is a NULL pointer dereference in the Linux kernel's AMD KFD driver (drm/amdkfd). The bug is in the pqm_debugfs_mqds function: a for-loop calling mqd_mgr->debugfs_show_mqd() is incorrectly placed outside the if (pqn->q) block that initializes mqd_mgr. When a process holds a KF...

PT-2026-93450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when reading the /sys/kernel/debug/kfd/mqds endpoint while a process holds an active KFD queue. This happens because the for loop calling the debugfs sh...

PT-2026-93448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the functions create queue cpsch and create queue nocpsch call mqd mgr-restore mqd during a CRIU restore process without verifying if th...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdkfd: Fixed an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters. However, the event field of the waiter structure is not initialized. When the...

Linux Distros Unpatched Vulnerability : CVE-2026-80870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Validate CRIU-restored IDs before idralloc The KFD CRIU restore flow restores...

PT-2026-85789

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KFD CRIU restore flow where object IDs restored from userspace are not properly validated before being passed to the idr alloc function. Specifically, in the kfd...

SUSE CVE-2026-74353

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedule a GPU reset is removing the queue fails. v2: move resumeall after...

CVE-2026-80703

A flaw was found in the Linux kernel's drm/amdkfd component. A local user with access to /dev/kfd could exploit a missing authorization check to terminate another process's active Graphics Processing Unit GPU debug session. This could lead to a denial of service for other users attempting to debu...