7.8
CVE-2026-80541
- EPSS 0.13%
- Veröffentlicht 26.08.2026 14:37:14
- Zuletzt bearbeitet 27.08.2026 06:17:35
- Erkennungen
drm/amdgpu: validate GEM_CREATE domain combinations
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: validate GEM_CREATE domain combinations
AMDGPU_GEM_CREATE checked domain bits against AMDGPU_GEM_DOMAIN_MASK,
but did not validate domain combinations. Userspace could combine
CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA, making
amdgpu_bo_placement_from_domain() exceed AMDGPU_BO_MAX_PLACEMENTS and
hit BUG_ON().
Allow combinations only within CPU/GTT/VRAM, and require non-CPU/GTT/
VRAM domains to be specified one at a time. Return -EINVAL for invalid
combinations in amdgpu_gem_create_ioctl().
v2: Rename helper from amdgpu_gem_domain_valid() to
amdgpu_gem_are_domains_valid() (Christian)
(cherry picked from commit db39852d0c39843cb02048dfb47e4b8c703e9080)Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd
Version <
5c73485af7ad9c3ae592db3481f370bc07705391
Status
affected
Version
77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd
Version <
584e3d47736fe2e7184ef3fc16b00b41485f96c6
Status
affected
Version
77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd
Version <
66133fc05c3af002f45de8a71b833c026ccbfba6
Status
affected
Version
77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd
Version <
ce5da474c3ddf7cccec5dce6aa4296297dd7caff
Status
affected
Version
77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd
Version <
493355096e397f9217b41c8574ed2784c7351443
Status
affected
Version
77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd
Version <
220aa2589d7321fb68d2e8597862711b5f22ae0b
Status
affected
Version
77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd
Version <
80f0b53860d02577709d69a312a29ca674b9297c
Status
affected
Version
77a2faa55c1a497f4e7e89eabd11830f0e3cb3dd
Version <
5e9d136ad74df4edec67e502ce267597064d8f86
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
4.20
Status
affected
Version
0
Version <
4.20
Status
unaffected
Version <=
5.10.*
Version
5.10.266
Status
unaffected
Version <=
5.15.*
Version
5.15.217
Status
unaffected
Version <=
6.1.*
Version
6.1.184
Status
unaffected
Version <=
6.6.*
Version
6.6.153
Status
unaffected
Version <=
6.12.*
Version
6.12.105
Status
unaffected
Version <=
6.18.*
Version
6.18.46
Status
unaffected
Version <=
7.1.*
Version
7.1.10
Status
unaffected
Version <=
*
Version
7.2
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.028 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
https://git.kernel.org/stable/c/5c73485af7ad9c3ae592db3481f370bc07705391
https://git.kernel.org/stable/c/584e3d47736fe2e7184ef3fc16b00b41485f96c6
https://git.kernel.org/stable/c/66133fc05c3af002f45de8a71b833c026ccbfba6
https://git.kernel.org/stable/c/ce5da474c3ddf7cccec5dce6aa4296297dd7caff
https://git.kernel.org/stable/c/493355096e397f9217b41c8574ed2784c7351443
https://git.kernel.org/stable/c/220aa2589d7321fb68d2e8597862711b5f22ae0b
https://git.kernel.org/stable/c/80f0b53860d02577709d69a312a29ca674b9297c
https://git.kernel.org/stable/c/5e9d136ad74df4edec67e502ce267597064d8f86