CVE-2026-68257
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
18/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/amdkfd: fix 32-bit overflow in CWSR total size calculation<br />
<br />
total_cwsr_size was computed in 32-bit before being used as a BO/SVM<br />
allocation size.<br />
With large ctx_save_restore_area_size and debug_memory_size<br />
multiplied by the XCC count, the product can wrap,<br />
yielding an undersized CWSR save area that firmware later overruns.<br />
<br />
Promote total_cwsr_size to u64 and use check_add_overflow()/<br />
check_mul_overflow() in both kfd_queue_acquire_buffers() and<br />
kfd_queue_release_buffers().<br />
<br />
(cherry picked from commit 319f7e13423ae3f486b9aea82f9ad2d6af0ee608)
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA