SB20261015160 - Integer underflow in Linux kernel amd amdkfd driver

Description

This security bulletin contains information about 1 vulnerability.

1) Integer underflow (CVE-ID: CVE-2026-98177)

CWE-ID: CWE-191 - Integer underflow

CVSSv4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to potentially cause an incorrect EOP ring size calculation.

The vulnerability exists due to integer underflow in the AMD KFD EOP ring size calculation when subtracting one from an order_base_2 result of zero. A local user can potentially trigger this arithmetic condition to cause an incorrect EOP ring size calculation.

The advisory describes this condition as theoretical because the ring buffer size cannot be less than 4096 bytes in practice.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/287a34c4d712e0bdb67751e21316d9c8d75a528a
• https://git.kernel.org/stable/c/8ee521b8b189799e361d4233c5180ba56656d4d4