Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98905

drm/amdkfd: Properly acquire queue buffers in CRIU restore

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfd_queue_acquire_buffers() was split off from set_queue_properties_from_user(), set_queue_properties_from_criu() was missed. Thus, set_queue_properties_from_criu() is not filling out the buffer fields of queue_properties, which can come up when subsequent code expects them to be non-null. Add the proper call to kfd_queue_acquire_buffers(), and also use the right cast types in set_queue_properties_from_criu() (which were missed at the same time) (cherry picked from commit 88ed96abbbe27b70193544fbc1ee06448c274714)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fb91065851cd5f2735348c5f3eddeeca3d7c2973 to < e2dbdd14c3352483a89e4a9afda05d0f3fcc2c83affected
  • fb91065851cd5f2735348c5f3eddeeca3d7c2973 to < c6c290e408fe328e091f0bf7502a42b0deea82e9affected
  • fb91065851cd5f2735348c5f3eddeeca3d7c2973 to < 20a5e7ffdfecddc34c60a6b4483f42acf3d8731daffected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References