Race condition in Linux kernel - CVE-2026-74446

Vulnerability details

The vulnerability allows a local user to cause a denial of service or execute arbitrary code.

The vulnerability exists due to a race condition in kfd_criu_checkpoint_events() in the amdkfd event handling code when checkpointing CRIU events while concurrent event create or destroy operations occur. A local user can trigger concurrent event insertion or removal to cause a denial of service or execute arbitrary code.

Exploitation requires a second thread in the same process to race event creation or destruction with the checkpoint operation.

Affected software

How to mitigate CVE-2026-74446

External References

• https://git.kernel.org/stable/c/2040b7e39027cb83bb8c7b84a4c95c2f6053c32f
• https://git.kernel.org/stable/c/6a52f48157fa7fb81e0c146937fd6c8b0c1cfdbd
• https://git.kernel.org/stable/c/9a7f765985f64fd4a7a58f7bc9cd80a1f4230628
• https://git.kernel.org/stable/c/bed80be08c0bee47fa242a4256ac873477c815f8
• https://git.kernel.org/stable/c/ff8bc5a68a9a70bdc38d61a72c7a49c56063f9d2

Related Security Bulletins

• Race condition in Linux kernel amd amdkfd driver
• Debian update for linux