CVE-2026-97497

Summary

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id

allocate_sdma_queue has an option where the sdma queue id can be specified (used by CRIU). We weren't bounds-checking that value.

Confirm it's less than the maximum number of queues.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 42f2bd50236b61ad0aeb2c233c990ee0d615fdadaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < dd2870ca036e1d51baa59f942007b36a595b5890affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < bfe9a7545b2a7be1c543f1741e16f2d5ec4116aeaffected
LinuxLinux0 < 6.12.111affected
LinuxLinux0 < 6.18.53affected
LinuxLinux6.12.111 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References