CVE-2026-68259drm/amdkfd: Check bounds in allocate_event_notification_slot
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocate_event_notification_slot The valid event ids go from 0 to KFD_SIGNAL_EVENT_LIMIT allocate_event_notification_slot has an option to specify an event id to allocate at, used by CRIU. We weren't checking the bounds on that value. Check them. v2: Lower bounds check is unecessary because of idr_alloc already rejecting negative numbers. Upper bounds check should be KFD_SIGNAL_EVENT_LIMIT since the signal mode mappings might not yet exist (cherry picked from commit 6853f1f6cbbeb3f53ebbbd7286536aeb2c5d5f50)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 40e8a766a761f7fdc8530347527b344fddf6f1a8 before 6884fc142b17f456caac50c14505f509bfbcd012; from 40e8a766a761f7fdc8530347527b344fddf6f1a8 before 85eedff5f0c4aba5a66bc37a1bd6bcecd0d77b53; from 40e8a766a761f7fdc8530347527b344fddf6f1a8 before 4622214f0542f64b02c250db0f9c677eeb032d9b; from 40e8a766a761f7fdc8530347527b344fddf6f1a8 before 50319efb865f72db45f191c8709511746d58ee0a; from 40e8a766a761f7fdc8530347527b344fddf6f1a8 before abeeb1947d81610c65349db4d89c6151f270e136; from 40e8a766a761f7fdc8530347527b344fddf6f1a8 before bb52249fbbe948875155ccd45cd8d74bf4ae747b | CNA record |
References
- https://git.kernel.org/stable/c/6884fc142b17f456caac50c14505f509bfbcd012
- https://git.kernel.org/stable/c/85eedff5f0c4aba5a66bc37a1bd6bcecd0d77b53
- https://git.kernel.org/stable/c/4622214f0542f64b02c250db0f9c677eeb032d9b
- https://git.kernel.org/stable/c/50319efb865f72db45f191c8709511746d58ee0a
- https://git.kernel.org/stable/c/abeeb1947d81610c65349db4d89c6151f270e136
- https://git.kernel.org/stable/c/bb52249fbbe948875155ccd45cd8d74bf4ae747b
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.