CVE-2026-97495

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Check bounds on allocate_doorbell

allocated_doorbell has an option to set the doorbell id to a specific value (used by CRIU). This value was not bounds checked.

Check to confirm it's less than KFD_MAX_NUM_OF_QUEUES_PER_PROCESS.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e0cecd04a4fc4c75e375b91cf53eab5ba2e4ab7faffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c2c89118c27cbd3adace62c5df19d15b0e96ade1affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1f087bb8cf9e8797633da35c85435e557ef74d06affected
LinuxLinux0 < 6.12.111affected
LinuxLinux0 < 6.18.53affected
LinuxLinux6.12.111 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References