Riskcovery

CVE-2026-63881

drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger

State
Published
Severity
7.8 High
Published
Jul 19, 2026
Updated
Oct 19, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger

get_queue_ids() computes array_size = num_queues * sizeof(uint32_t), which could overflow on 32-bit size_t build. using array_size() instead, it saturates to SIZE_MAX on overflow.

(cherry picked from commit 2d57a0475f085c08b49312dfd8edcb461845f285)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

  • CWE-190 Integer Overflow or Wraparound

Affected Products

ProductVersions
LinuxLinux
  • a70a93fa568b4f05aba548dadb673703eccf5480 to before 4e5f808b454167cc58d7084a407a554d8ddc694dAffected
  • a70a93fa568b4f05aba548dadb673703eccf5480 to before de70a80992396ee306ee3a2810ad28aa1608ba9bAffected
  • a70a93fa568b4f05aba548dadb673703eccf5480 to before 5cf4a41aa0d74e4c83f82d2ce233b5189ed4b43cAffected
  • a70a93fa568b4f05aba548dadb673703eccf5480 to before 4f9eeedc3d3151f8a226fd676c314a813edda5a1Affected
  • a70a93fa568b4f05aba548dadb673703eccf5480 to before 93f5534b35a05ef8a0109c1eefa800062fee810aAffected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.6.143 through 6.6.*Not affected
  • 6.12.93 through 6.12.*Not affected
  • 6.18.35 through 6.18.*Not affected
  • 7.0.12 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.