CVE-2026-80747drm/amdkfd: Add bounds check for CRAT subtype length
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype header fits within the image, but does not verify that the advertised subtype length fits. A malformed CRAT table with an oversized length field causes out-of-bounds reads when kfd_parse_subtype() casts the header to specific subtype structures. Add validation that sub_type_hdr + length does not exceed the image boundary before parsing the subtype contents. (cherry picked from commit 48e1d1e6e8798aef0312e68d8e586021b5b3cf4d)
- CVSS
- 8.0 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5b5c4e40a37e858e2bff8cd91be8e972256392c4 before 69164d6bdad5d6657e51436a3f602822f620a46a; from 5b5c4e40a37e858e2bff8cd91be8e972256392c4 before ca91e0cc8087568e4b791648a7c01e804f48cb73; from 5b5c4e40a37e858e2bff8cd91be8e972256392c4 before 6e7566ba4739dd573c331adde1c96690f7a567bd | CNA record |
References
- https://git.kernel.org/stable/c/69164d6bdad5d6657e51436a3f602822f620a46a
- https://git.kernel.org/stable/c/ca91e0cc8087568e4b791648a7c01e804f48cb73
- https://git.kernel.org/stable/c/6e7566ba4739dd573c331adde1c96690f7a567bd
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.