Skip to main content
CVE-2026-98905VulnerabilityPublished Updated

CRIU restore · drm/amdkfd: Properly acquire queue buffers

Affects MicrosoftSource GCVE Database

0
Authoritative record:CVE-2026-98905

Not known to be exploited · fixed in e2dbdd14c3352483a89e4a9afda05d0f3fcc2c83 : update Microsoft when convenient.

Data as of 28 Oct 2026, 08:57 UTC

Severity
Unrated

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in e2dbdd14c3352483a89e4a9afda05d0f3fcc2c83, c6c290e408fe328e091f0bf7502a42b0deea82e9, 20a5e7ffdfecddc34c60a6b4483f42acf3d8731d

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux to e2dbdd14c3352483a89e4a9afda05d0f3fcc2c83, c6c290e408fe328e091f0bf7502a42b0deea82e9 or 20a5e7ffdfecddc34c60a6b4483f42acf3d8731d.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ fb91065851cd5f2735348c5f3eddeeca3d7c2973, < e2dbdd14c3352483a89e4a9afda05d0f3fcc2c83
Fixed in
  • e2dbdd14c3352483a89e4a9afda05d0f3fcc2c83
LinuxLinuxAffected
  • ≥ fb91065851cd5f2735348c5f3eddeeca3d7c2973, < c6c290e408fe328e091f0bf7502a42b0deea82e9
Fixed in
  • c6c290e408fe328e091f0bf7502a42b0deea82e9
LinuxLinuxAffected
  • ≥ fb91065851cd5f2735348c5f3eddeeca3d7c2973, < 20a5e7ffdfecddc34c60a6b4483f42acf3d8731d
Fixed in
  • 20a5e7ffdfecddc34c60a6b4483f42acf3d8731d
LinuxLinuxAffected
  • =6.12
Fixed in–

Description

This vulnerability involves the drm/amdkfd component where queue buffers are not properly acquired during CRIU restore operations. The issue affects specific versions 3.0 and 4.0 of the Microsoft product. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.

References

Community reviews

Loading reviews…