Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-46197

drm/amdkfd: validate SVM ioctl nattr against buffer size

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: validate SVM ioctl nattr against buffer size Validate nattr field against the buffer size, preventing out-of-bounds buffer access via user-controlled attribute count. (cherry picked from commit 5eca8bfdfa456c3304ca77523718fe24254c172f)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 42de677f79999791bee4e21be318c32d90ab62c6 to < daa8bc5f83814b55b71d2b5b3a090d57a5219c21affected
  • 42de677f79999791bee4e21be318c32d90ab62c6 to < fb07a0c9c8419164812e07274947f11b1d92dd61affected
  • 42de677f79999791bee4e21be318c32d90ab62c6 to < 91c6dc5a41695d02dfc6299f106ac38a6c493e52affected
  • 42de677f79999791bee4e21be318c32d90ab62c6 to < ccd060b5c7cc75ae7e211c250b97c5b6272e7efcaffected
  • 42de677f79999791bee4e21be318c32d90ab62c6 to < db9530a9873a7c85d2266a922589ebcf427fa631affected
  • 42de677f79999791bee4e21be318c32d90ab62c6 to < 6abd3a4417cb73a7d0db7e25bf11fae1074bdba3affected
  • 42de677f79999791bee4e21be318c32d90ab62c6 to < 045e0ff208f0838a246c10204105126611b267a1affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.140 to ≤ 6.6.*unaffected
  • 6.12.90 to ≤ 6.12.*unaffected
  • 6.18.32 to ≤ 6.18.*unaffected
  • 7.0.9 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References