SB20260816266 - Integer overflow in Linux kernel amd amdkfd driver
Published: August 16, 2026
Security Bulletin ID
SB20260816266
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Integer overflow (CVE-ID: CVE-2026-74447)
CWE-ID: CWE-190 - Integer overflow
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to integer overflow in kfd_queue_acquire_buffers() in the amdkfd queue handling code when aligning a user-supplied EOP ring buffer size. A local user can supply a crafted eop_ring_buffer_size value to cause a denial of service.
On GFX8 and GFX9 systems, the issue can cause CP EOP writes to land past the backing buffer and fault the GPU.
Remediation
Install update from vendor's website.