Integer overflow in Linux kernel - CVE-2026-74447
Published: August 16, 2026
Vulnerability identifier: #VU143330
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-74447
CWE-ID: CWE-190
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to integer overflow in kfd_queue_acquire_buffers() in the amdkfd queue handling code when aligning a user-supplied EOP ring buffer size. A local user can supply a crafted eop_ring_buffer_size value to cause a denial of service.
On GFX8 and GFX9 systems, the issue can cause CP EOP writes to land past the backing buffer and fault the GPU.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-74447
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.105-1
linux (Debian package) - update to 6.12.105-1