Riskcovery

CVE-2026-45853

drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
May 27, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()

amdgpu_discovery_get_nps_info() internally allocates memory for ranges using kvcalloc(), which may use vmalloc() for large allocation. Using kfree() to release vmalloc memory will lead to a memory corruption.

Use kvfree() to safely handle both kmalloc and vmalloc allocations.

Compile tested only. Issue found using a prototype static analysis tool and code review.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b194d21b9bcc15b50df1bc3ff7428e51c2918a6f to before 16e7e7ad8cdc6b4c4af7f31e262f1494c1b2a55eAffected
  • b194d21b9bcc15b50df1bc3ff7428e51c2918a6f to before 9ae85b0c1909b6c6bfd2636b04cdaf7f520bf2b5Affected
  • b194d21b9bcc15b50df1bc3ff7428e51c2918a6f to before f441538893eba6347b983f2904819ca6c99da65eAffected
  • b194d21b9bcc15b50df1bc3ff7428e51c2918a6f to before 0c44d61945c4a80775292d96460aa2f22e62f86cAffected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.14 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.