-

CVE-2026-68259

drm/amdkfd: Check bounds in allocate_event_notification_slot

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Check bounds in allocate_event_notification_slot

The valid event ids go from 0 to KFD_SIGNAL_EVENT_LIMIT

allocate_event_notification_slot has an option to specify
an event id to allocate at, used by CRIU. We weren't checking
the bounds on that value.

Check them.

v2: Lower bounds check is unecessary because of idr_alloc
already rejecting negative numbers. Upper bounds check should
be KFD_SIGNAL_EVENT_LIMIT since the signal mode mappings might
not yet exist

(cherry picked from commit 6853f1f6cbbeb3f53ebbbd7286536aeb2c5d5f50)
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 40e8a766a761f7fdc8530347527b344fddf6f1a8
Version < 6884fc142b17f456caac50c14505f509bfbcd012
Status affected
Version 40e8a766a761f7fdc8530347527b344fddf6f1a8
Version < 85eedff5f0c4aba5a66bc37a1bd6bcecd0d77b53
Status affected
Version 40e8a766a761f7fdc8530347527b344fddf6f1a8
Version < 4622214f0542f64b02c250db0f9c677eeb032d9b
Status affected
Version 40e8a766a761f7fdc8530347527b344fddf6f1a8
Version < 50319efb865f72db45f191c8709511746d58ee0a
Status affected
Version 40e8a766a761f7fdc8530347527b344fddf6f1a8
Version < abeeb1947d81610c65349db4d89c6151f270e136
Status affected
Version 40e8a766a761f7fdc8530347527b344fddf6f1a8
Version < bb52249fbbe948875155ccd45cd8d74bf4ae747b
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.18
Status affected
Version 0
Version < 5.18
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.07
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/85eedff5f0c4aba5a66bc37a1bd6bcecd0d77b53
https://git.kernel.org/stable/c/4622214f0542f64b02c250db0f9c677eeb032d9b
https://git.kernel.org/stable/c/50319efb865f72db45f191c8709511746d58ee0a
https://git.kernel.org/stable/c/abeeb1947d81610c65349db4d89c6151f270e136
https://git.kernel.org/stable/c/bb52249fbbe948875155ccd45cd8d74bf4ae747b
https://git.kernel.org/stable/c/6884fc142b17f456caac50c14505f509bfbcd012