CVE-2026-68257
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
18/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/amdkfd: fix 32-bit overflow in CWSR total size calculation<br />
<br />
total_cwsr_size was computed in 32-bit before being used as a BO/SVM<br />
allocation size.<br />
With large ctx_save_restore_area_size and debug_memory_size<br />
multiplied by the XCC count, the product can wrap,<br />
yielding an undersized CWSR save area that firmware later overruns.<br />
<br />
Promote total_cwsr_size to u64 and use check_add_overflow()/<br />
check_mul_overflow() in both kfd_queue_acquire_buffers() and<br />
kfd_queue_release_buffers().<br />
<br />
(cherry picked from commit 319f7e13423ae3f486b9aea82f9ad2d6af0ee608)
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH