CVE-2026-68259

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
18/08/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> drm/amdkfd: Check bounds in allocate_event_notification_slot<br /> <br /> The valid event ids go from 0 to KFD_SIGNAL_EVENT_LIMIT<br /> <br /> allocate_event_notification_slot has an option to specify<br /> an event id to allocate at, used by CRIU. We weren&amp;#39;t checking<br /> the bounds on that value.<br /> <br /> Check them.<br /> <br /> v2: Lower bounds check is unecessary because of idr_alloc<br /> already rejecting negative numbers. Upper bounds check should<br /> be KFD_SIGNAL_EVENT_LIMIT since the signal mode mappings might<br /> not yet exist<br /> <br /> (cherry picked from commit 6853f1f6cbbeb3f53ebbbd7286536aeb2c5d5f50)

Impact