Riskcovery

CVE-2026-63879

drm/amdgpu: fix amdgpu_hmm_range_get_pages

State
Published
Severity
7.8 High
Published
Jul 19, 2026
Updated
Oct 21, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix amdgpu_hmm_range_get_pages

The notifier sequence must only be read once or otherwise we could work with invalid pages.

While at it also fix the coding style, e.g. drop the pre-initialized return value and use the common define for 2G range.

(cherry picked from commit c08972f555945cda57b0adb72272a37910153390)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

ProductVersions
LinuxLinux
  • c1420a5dd4dd2a1ffc86965ad1c6f439afb130bc to before e35cf322897dd4921248d11311a89c865b534c14Affected
  • c1420a5dd4dd2a1ffc86965ad1c6f439afb130bc to before 93a9f121de6383f20290840d025ee28fda5f53b5Affected
  • c1420a5dd4dd2a1ffc86965ad1c6f439afb130bc to before fa34d3e14cb763b50702e8a0f7d4cfd877a73ab9Affected
  • c1420a5dd4dd2a1ffc86965ad1c6f439afb130bc to before 2fd24407457a6b181ba827705678da70e528dcd0Affected
  • c1420a5dd4dd2a1ffc86965ad1c6f439afb130bc to before 962d684b5dc0741dcd93485d41b450de402d5592Affected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.0.12 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.