Linux amdkfd: missing bounds check on the CRIU-supplied SDMA queue id
Impact
allocate_sdma_queue accepts a caller-specified SDMA queue id - the path CRIU uses to restore checkpointed GPU processes - without checking it against the maximum queue count, so an out-of-range id indexes past the driver's queue bitmap and arrays. Any process that can open /dev/kfd on an AMD GPU node can pass that id directly, making this an unauthenticated-within-the-node write outside the intended bounds in the kernel. On a multi-tenant ROCm host that is a local privilege-escalation and node-crash primitive available to ordinary GPU tenants. It is separate from the destroy-queue race in the same driver (CVE-2026-97429) - different code path, different fix.
Who can reach it
Local user holding /dev/kfd on an AMD GPU node; reached through the KFD queue-creation ioctl with a restore id, no elevated privilege required.
What to do
Pick up the stable-tree amdkfd bounds-check commit and reboot each AMD GPU node after installing the kernel. Interim mitigation is to withhold /dev/kfd from untrusted workloads, which also disables ROCm for them. Combine the maintenance window with the other amdkfd fix in this batch.
References
Related entries
- Linux drm/virtio: virtio-gpu hands guest-physical addresses to the host on Xen PV, exposing another domain's memoryCVE-2026-98156 · Linux kernel drm/virtio (virtio-gpu resource backing, DMA API on Xen PV)High
- accel/amdxdna: device buffers could be exported over dma-buf when they were never meant to beCVE-2026-98436 · Linux kernel accel/amdxdna (AMD XDNA NPU device buffer dma-buf export)High
- Linux kernel drm/xe: NULL pointer dereference racing VM close against eviction of a shared BOCVE-2026-98510 · Linux kernel drm/xe (VM close path, contested VMA vs page-table teardown)High
- Linux kernel nouveau: double-free of VMM page array when client init fails on device openCVE-2026-98515 · Linux kernel nouveau (nvif_vmm_dtor client teardown)High
- Linux kernel nouveau/uvmm: use-after-free reading resource type when BO sits in TTM_PL_SYSTEMCVE-2026-98517 · Linux kernel nouveau uvmm (GPU VA bind path, TTM_PL_SYSTEM resource)High
- Linux kernel amdkfd: cached address_space for /dev/kfd causes use-after-free and missed unmap on GPU resetCVE-2026-98520 · Linux kernel amdgpu/amdkfd (kfd_dev_mapping cached address_space)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.