SB2026081270 - Out-of-bounds read in Linux kernel amd amdkfd driver

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds read (CVE-ID: CVE-2026-68447)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to an out-of-bounds read in the amdkfd CRIU checkpoint handling for the MQD control stack when copying checkpoint data to userspace. A local user can trigger a checkpoint operation with a hardware-reported control stack size larger than the allocated buffer object to disclose sensitive information.

The issue can leak kernel data from adjacent GTT memory to userspace.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/426ffae6ecc7ec77d32bf8be065c21a1b881b084
• https://git.kernel.org/stable/c/a0d87beb2660a5098b2b0ecdc1e96810a9074ea9