SB20260812261 - NULL pointer dereference in Linux kernel amd amdgpu driver

Description

This security bulletin contains information about 1 vulnerability.

1) NULL pointer dereference (CVE-ID: CVE-2026-68272)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to an improper input validation leading to a NULL-pointer dereference in amdgpu_cs_pass1() and amdgpu_cs_p2_shadow() when processing an undersized AMDGPU_CHUNK_ID_CP_GFX_SHADOW chunk. A local user can submit a specially crafted chunk with zero length to cause a denial of service.

This is reachable by an unprivileged process in the render group.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/24668ca3ec19434d7a9574bf9112f2b0614c3a4e
• https://git.kernel.org/stable/c/2aa9ea2bd5146d237c8cc16d8737d878b0298a94
• https://git.kernel.org/stable/c/315d2e5741a81b0be763e80413a2677e22b7e596
• https://git.kernel.org/stable/c/3f190956404da55560056ce20606010e18bc059c
• https://git.kernel.org/stable/c/84c4c36acd5c4b2558b5069f869a165b2c655c84