CVE-2021-4460

drm/amdkfd: Fix UBSAN shift-out-of-bounds warning

State: Published
Severity: 7.1 High
Published: Oct 1, 2025
Updated: Aug 11, 2026
Reserved: Oct 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Fix UBSAN shift-out-of-bounds warning

If get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up doing a shift operation where the number of bits shifted equals number of bits in the operand. This behaviour is undefined.

Set num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the count is >= number of bits in the operand.

Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	35cdc81bfa94d10373ecae279f3c48ca858ac4fd to before 0c0356ef2498c1a250fe3846f30293f828737309Affected 35cdc81bfa94d10373ecae279f3c48ca858ac4fd to before 1874b0ef1426b873de94c61861e38f29a8df714cAffected 35cdc81bfa94d10373ecae279f3c48ca858ac4fd to before 3fdc5182700910a685d23df57d65166e8556a266Affected 35cdc81bfa94d10373ecae279f3c48ca858ac4fd to before 9069b1b542de8f3bbffef868aff41521b21485cfAffected 35cdc81bfa94d10373ecae279f3c48ca858ac4fd to before 50e2fc36e72d4ad672032ebf646cecb48656efe0Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.4.118 through 5.4.Not affected 5.10.36 through 5.10.Not affected 5.11.20 through 5.11.Not affected 5.12.3 through 5.12.Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

35cdc81bfa94d10373ecae279f3c48ca858ac4fd to before 0c0356ef2498c1a250fe3846f30293f828737309Affected
35cdc81bfa94d10373ecae279f3c48ca858ac4fd to before 1874b0ef1426b873de94c61861e38f29a8df714cAffected
35cdc81bfa94d10373ecae279f3c48ca858ac4fd to before 3fdc5182700910a685d23df57d65166e8556a266Affected
35cdc81bfa94d10373ecae279f3c48ca858ac4fd to before 9069b1b542de8f3bbffef868aff41521b21485cfAffected
35cdc81bfa94d10373ecae279f3c48ca858ac4fd to before 50e2fc36e72d4ad672032ebf646cecb48656efe0Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.4.118 through 5.4.*Not affected
5.10.36 through 5.10.*Not affected
5.11.20 through 5.11.*Not affected
5.12.3 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.