Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-89810

drm/amdkfd: Fix error path at svm_migrate_copy_to_ram

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix error path at svm_migrate_copy_to_ram If page migration from device to sys ram fails for some reasons driver needs release and unlock allocated system pages. To do that driver should use page physical address, or pfn, then get struct page*. Current driver uses dma address(for adev) that is not correct with IOMMU enabled, or even in general. The patch releases and unlocks allocated system pages based on where migration failed by struct page* of sys ram pages. Also dma_unmap correspodent system ram pages at error path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 48ff079b28d82dbce000cc45c0fd35b6ae9ffbda to < ee007a238dd363ba2f3a3b01815703cfe98711c7affected
  • 48ff079b28d82dbce000cc45c0fd35b6ae9ffbda to < 44cad7ea3532f14999008d899daacc4ce4b633bfaffected
  • 48ff079b28d82dbce000cc45c0fd35b6ae9ffbda to < 872b7427e64f3e84b16c62577cbf3cd09a3401a2affected
  • 48ff079b28d82dbce000cc45c0fd35b6ae9ffbda to < da87bcad1f781d822e7ced6d1de9dbc6d381c72eaffected
  • 48ff079b28d82dbce000cc45c0fd35b6ae9ffbda to < a2035918a7a1d8fd3bb79d22e1e149294a5a8418affected
  • 48ff079b28d82dbce000cc45c0fd35b6ae9ffbda to < 960c4a8069bfd352c48cc88592618f1ebe24c69eaffected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.18.51 to ≤ 6.18.*unaffected
  • 7.2.5 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References