SB2026102420 - NULL pointer dereference in Linux kernel amd amdkfd driver
Published: October 24, 2026
Security Bulletin ID
SB2026102420
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2026-98905)
CWE-ID: CWE-476 - NULL Pointer Dereference
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to potentially cause a denial of service by crashing the kernel.
The vulnerability exists due to missing initialization of queue buffer fields in the AMD KFD queue restoration code when restoring GPU queues through CRIU. A local user can trigger queue restoration to leave buffer fields null, potentially causing a null pointer dereference when subsequent code accesses them.
Remediation
Install update from vendor's website.