CVE-2026-97495drm/amdkfd: Check bounds on allocate_doorbell
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on allocate_doorbell allocated_doorbell has an option to set the doorbell id to a specific value (used by CRIU). This value was not bounds checked. Check to confirm it's less than KFD_MAX_NUM_OF_QUEUES_PER_PROCESS.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5bb6a8fa75fcfda93592bee0a4910420ceab15f3 before 7e06636260a2d95e3fa181bc337d0eeb812b7a41; 5bb6a8fa75fcfda93592bee0a4910420ceab15f3 builds before 3d2ddfc9b361b0d38c3ff4804ce42503e4bc97de; from 5bb6a8fa75fcfda93592bee0a4910420ceab15f3 before e0cecd04a4fc4c75e375b91cf53eab5ba2e4ab7f; from 5bb6a8fa75fcfda93592bee0a4910420ceab15f3 before c2c89118c27cbd3adace62c5df19d15b0e96ade1; 5bb6a8fa75fcfda93592bee0a4910420ceab15f3 builds before 1f087bb8cf9e8797633da35c85435e557ef74d06 | CNA record |
References
- https://git.kernel.org/stable/c/7e06636260a2d95e3fa181bc337d0eeb812b7a41
- https://git.kernel.org/stable/c/3d2ddfc9b361b0d38c3ff4804ce42503e4bc97de
- https://git.kernel.org/stable/c/e0cecd04a4fc4c75e375b91cf53eab5ba2e4ab7f
- https://git.kernel.org/stable/c/c2c89118c27cbd3adace62c5df19d15b0e96ade1
- https://git.kernel.org/stable/c/1f087bb8cf9e8797633da35c85435e557ef74d06
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.