Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-97429

drm/amdkfd: fix UAF race in destroy_queue_cpsch

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix UAF race in destroy_queue_cpsch wait_on_destroy_queue() drops locks to wait for queue resume, allowing a concurrent destroy to free the queue. Use is_being_destroyed flag to serialize destruction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a70a93fa568b4f05aba548dadb673703eccf5480 to < 090b51e2dabf88c02c0b6b25ea672a8bddfba7d5affected
  • a70a93fa568b4f05aba548dadb673703eccf5480 to < 41144829f4645c2bd4cb501d34d253858f750c0aaffected
  • a70a93fa568b4f05aba548dadb673703eccf5480 to < d98c8032c29944e1e572e1f49a0613d364fece0faffected
  • a70a93fa568b4f05aba548dadb673703eccf5480 to < ac081deaf16a639ea7dff2f285fe421a33c1ade0affected

Linux Linux

Default version status: affected

  • 6.5affected
  • 0 to < 6.5unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References