CVE-2026-68259

drm/amdkfd: Check bounds in allocate_event_notification_slot

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Check bounds in allocate_event_notification_slot

The valid event ids go from 0 to KFD_SIGNAL_EVENT_LIMIT

allocate_event_notification_slot has an option to specify an event id to allocate at, used by CRIU. We weren't checking the bounds on that value.

Check them.

v2: Lower bounds check is unecessary because of idr_alloc already rejecting negative numbers. Upper bounds check should be KFD_SIGNAL_EVENT_LIMIT since the signal mode mappings might not yet exist

(cherry picked from commit 6853f1f6cbbeb3f53ebbbd7286536aeb2c5d5f50)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	40e8a766a761f7fdc8530347527b344fddf6f1a8 to before 6884fc142b17f456caac50c14505f509bfbcd012Affected 40e8a766a761f7fdc8530347527b344fddf6f1a8 to before 85eedff5f0c4aba5a66bc37a1bd6bcecd0d77b53Affected 40e8a766a761f7fdc8530347527b344fddf6f1a8 to before 4622214f0542f64b02c250db0f9c677eeb032d9bAffected 40e8a766a761f7fdc8530347527b344fddf6f1a8 to before 50319efb865f72db45f191c8709511746d58ee0aAffected 40e8a766a761f7fdc8530347527b344fddf6f1a8 to before abeeb1947d81610c65349db4d89c6151f270e136Affected 40e8a766a761f7fdc8530347527b344fddf6f1a8 to before bb52249fbbe948875155ccd45cd8d74bf4ae747bAffected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

40e8a766a761f7fdc8530347527b344fddf6f1a8 to before 6884fc142b17f456caac50c14505f509bfbcd012Affected
40e8a766a761f7fdc8530347527b344fddf6f1a8 to before 85eedff5f0c4aba5a66bc37a1bd6bcecd0d77b53Affected
40e8a766a761f7fdc8530347527b344fddf6f1a8 to before 4622214f0542f64b02c250db0f9c677eeb032d9bAffected
40e8a766a761f7fdc8530347527b344fddf6f1a8 to before 50319efb865f72db45f191c8709511746d58ee0aAffected
40e8a766a761f7fdc8530347527b344fddf6f1a8 to before abeeb1947d81610c65349db4d89c6151f270e136Affected
40e8a766a761f7fdc8530347527b344fddf6f1a8 to before bb52249fbbe948875155ccd45cd8d74bf4ae747bAffected

LinuxLinux

5.18Affected
before 5.18Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.