CVE-2026-63879drm/amdgpu: fix amdgpu_hmm_range_get_pages
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpu_hmm_range_get_pages The notifier sequence must only be read once or otherwise we could work with invalid pages. While at it also fix the coding style, e.g. drop the pre-initialized return value and use the common define for 2G range. (cherry picked from commit c08972f555945cda57b0adb72272a37910153390)
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Awaiting Analysis
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c1420a5dd4dd2a1ffc86965ad1c6f439afb130bc before fa34d3e14cb763b50702e8a0f7d4cfd877a73ab9; from c1420a5dd4dd2a1ffc86965ad1c6f439afb130bc before 2fd24407457a6b181ba827705678da70e528dcd0; from c1420a5dd4dd2a1ffc86965ad1c6f439afb130bc before 962d684b5dc0741dcd93485d41b450de402d5592 | CNA record |
References
- https://git.kernel.org/stable/c/fa34d3e14cb763b50702e8a0f7d4cfd877a73ab9
- https://git.kernel.org/stable/c/2fd24407457a6b181ba827705678da70e528dcd0
- https://git.kernel.org/stable/c/962d684b5dc0741dcd93485d41b450de402d5592
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.