Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-68259

drm/amdkfd: Check bounds in allocate_event_notification_slot

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocate_event_notification_slot The valid event ids go from 0 to KFD_SIGNAL_EVENT_LIMIT allocate_event_notification_slot has an option to specify an event id to allocate at, used by CRIU. We weren't checking the bounds on that value. Check them. v2: Lower bounds check is unecessary because of idr_alloc already rejecting negative numbers. Upper bounds check should be KFD_SIGNAL_EVENT_LIMIT since the signal mode mappings might not yet exist (cherry picked from commit 6853f1f6cbbeb3f53ebbbd7286536aeb2c5d5f50)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 40e8a766a761f7fdc8530347527b344fddf6f1a8 to < 6884fc142b17f456caac50c14505f509bfbcd012affected
  • 40e8a766a761f7fdc8530347527b344fddf6f1a8 to < 85eedff5f0c4aba5a66bc37a1bd6bcecd0d77b53affected
  • 40e8a766a761f7fdc8530347527b344fddf6f1a8 to < 4622214f0542f64b02c250db0f9c677eeb032d9baffected
  • 40e8a766a761f7fdc8530347527b344fddf6f1a8 to < 50319efb865f72db45f191c8709511746d58ee0aaffected
  • 40e8a766a761f7fdc8530347527b344fddf6f1a8 to < abeeb1947d81610c65349db4d89c6151f270e136affected
  • 40e8a766a761f7fdc8530347527b344fddf6f1a8 to < bb52249fbbe948875155ccd45cd8d74bf4ae747baffected

Linux Linux

Default version status: affected

  • 5.18affected
  • 0 to < 5.18unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.148 to ≤ 6.6.*unaffected
  • 6.12.101 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References