Riskcovery

CVE-2026-46229

drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure

State
Published
Severity
Not scored
Published
May 28, 2026
Updated
Oct 30, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure

KFD VRAM allocations set AMDGPU_GEM_CREATE_VRAM_WIPE_ON_RELEASE but not AMDGPU_GEM_CREATE_VRAM_CLEARED, leaving freshly allocated VRAM with stale data from prior use observable by compute kernels.

The GEM ioctl path already sets VRAM_CLEARED for all userspace allocations via amdgpu_gem_create_ioctl() and amdgpu_mode_dumb_create(). The KFD path was missing this flag, allowing stale page table remnants to leak into user buffers.

This causes crashes in RCCL P2P transport where non-zero data in ptrExchange/head/tail fields corrupts the protocol handshake.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6856e4b65f64eeb3f17148f79b36c1d60c627529 to before 6bcf59545c84a5105d14d59f40069ef4c033584eAffected
  • 6856e4b65f64eeb3f17148f79b36c1d60c627529 to before 1db431380879fd9d28b763a88a0c0431be5be8dfAffected
  • 6856e4b65f64eeb3f17148f79b36c1d60c627529 to before 32b153658f017ad2f5bf8aab479e8d16ac95bc3aAffected
  • 6856e4b65f64eeb3f17148f79b36c1d60c627529 to before 77d0b5d11387071770246fd0185a69fa28e8e109Affected
  • 6856e4b65f64eeb3f17148f79b36c1d60c627529 to before 047d44d8d29a6a1a5757256837aa9dd78e3cd0b5Affected
  • 6856e4b65f64eeb3f17148f79b36c1d60c627529 to before ad52d61d82181dbdb7f05826de38352d5e550cc2Affected
LinuxLinux
  • 5.4Affected
  • before 5.4Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.140 through 6.6.*Not affected
  • 6.12.90 through 6.12.*Not affected
  • 6.18.32 through 6.18.*Not affected
  • 7.0.9 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.