SB2026072165 - Improper Initialization in Linux kernel amd amdgpu driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026072165

SB2026072165 - Improper Initialization in Linux kernel amd amdgpu driver

Published: July 21, 2026

Security Bulletin ID SB2026072165
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper Initialization (CVE-ID: CVE-2026-53374)

CWE-ID: CWE-665 - Improper Initialization

CVSSv4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause memory corruption in GPU address translation.

The vulnerability exists due to improper initialization in the AMDGPU GART table when allocating and populating page table entries in VRAM. A local user can trigger GART mappings so that stale uninitialized entries are used to cause memory corruption in GPU address translation.

The issue arises because speculative TLB loads may consume other uninitialized entries from the same cacheline, and stale garbage page table entries may later be used by the GPU.


Remediation

Install update from vendor's website.

References