Skip to main content
VulnerabilityPublished Updated

CVE-2026-93823: Linux kernel · drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl

Source GCVE Database

0
Compare
Authoritative record:CVE-2026-93823· Medium

Not known to be exploited · fixed in d51841bb5ceee75ec3aeeb4e5c51c8e5e7524228 : update Linux kernel when convenient.

Data as of 30 Oct 2026, 17:52 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in d51841bb5ceee75ec3aeeb4e5c51c8e5e7524228, d298c100796b2cd1e7e75f8e615b79d034e510f8, a65ccabde6deb95baf9442bd98299e2248884162 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 24 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 1dde0ea95b782425b95455d487cb44991525a1d1, < d51841bb5ceee75ec3aeeb4e5c51c8e5e7524228
Fixed in
  • d51841bb5ceee75ec3aeeb4e5c51c8e5e7524228
LinuxLinuxAffected
  • ≥ 1dde0ea95b782425b95455d487cb44991525a1d1, < d298c100796b2cd1e7e75f8e615b79d034e510f8
Fixed in
  • d298c100796b2cd1e7e75f8e615b79d034e510f8
LinuxLinuxAffected
  • ≥ 1dde0ea95b782425b95455d487cb44991525a1d1, < a65ccabde6deb95baf9442bd98299e2248884162
Fixed in
  • a65ccabde6deb95baf9442bd98299e2248884162
LinuxLinuxAffected
  • ≥ 1dde0ea95b782425b95455d487cb44991525a1d1, < 8242a8d9d7194d5ef8a8b38a5621ca0966a3ec15
Fixed in
  • 8242a8d9d7194d5ef8a8b38a5621ca0966a3ec15
LinuxLinuxAffected
  • ≥ 1dde0ea95b782425b95455d487cb44991525a1d1, < 2d9fd0f01550aab4a0a1984b4379e50545906248
Fixed in
  • 2d9fd0f01550aab4a0a1984b4379e50545906248
LinuxLinuxAffected
  • =5.0
Fixed in–

AI-suggested

This vulnerability has been resolved by a patch that makes the driver internally decide the buffer allocation size, preventing user-controlled large allocations. Users should update their Linux kernel to a version including this fix. No additional mitigation is required once the patch is applied.

Description

A vulnerability in the Linux kernel's amdkfd driver allowed user space to control the buffer size for the AMDKFD_IOC_GET_DMABUF_INFO ioctl call. This could enable a malicious user to request an excessively large buffer (e.g., 2 GiB), potentially causing an out-of-memory (OOM) condition in kernel context. The issue has been fixed by changing the driver to determine the buffer size internally and only allocate the necessary amount, preventing user-controlled large allocations.

References

Community reviews

Loading reviews…