drm/amdkfd: validate SVM ioctl nattr against buffer size
CVE-2026-46197 is a vulnerability related to the drm/amdkfd component where the SVM ioctl nattr is not properly validated against the buffer size. The provided information is minimal and does not include technical details or exploitation scenarios. There is no CVSS score assigned to this vulnerability, and no known exploits in the wild have been reported. No patch or remediation details are provided, and the vendor advisory content does not clarify the fix status. The affected products include Microsoft and Azure Linux 3. 0 versions. Due to the lack of detailed impact information, the severity is assessed based on the nature of the vulnerability involving input validation in a kernel component.
AI Analysis
Technical Summary
This vulnerability concerns the drm/amdkfd driver component where the SVM ioctl nattr parameter is not validated against the buffer size, potentially leading to improper handling of input data. The vulnerability affects Microsoft and Azure Linux 3.0 products. No CVSS score or detailed technical exploitation information is available. No patch or remediation information is provided in the advisory. The vulnerability was published on May 2, 2026, by the Microsoft Security Response Center.
Potential Impact
The impact specifics are not detailed in the provided data. Improper validation of ioctl parameters in kernel drivers can lead to memory corruption or denial of service, but no explicit impact or exploitation details are given. No known exploits in the wild have been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation is provided in the available information. Users should monitor the Microsoft Security Response Center for updates.
drm/amdkfd: validate SVM ioctl nattr against buffer size
Description
CVE-2026-46197 is a vulnerability related to the drm/amdkfd component where the SVM ioctl nattr is not properly validated against the buffer size. The provided information is minimal and does not include technical details or exploitation scenarios. There is no CVSS score assigned to this vulnerability, and no known exploits in the wild have been reported. No patch or remediation details are provided, and the vendor advisory content does not clarify the fix status. The affected products include Microsoft and Azure Linux 3. 0 versions. Due to the lack of detailed impact information, the severity is assessed based on the nature of the vulnerability involving input validation in a kernel component.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability concerns the drm/amdkfd driver component where the SVM ioctl nattr parameter is not validated against the buffer size, potentially leading to improper handling of input data. The vulnerability affects Microsoft and Azure Linux 3.0 products. No CVSS score or detailed technical exploitation information is available. No patch or remediation information is provided in the advisory. The vulnerability was published on May 2, 2026, by the Microsoft Security Response Center.
Potential Impact
The impact specifics are not detailed in the provided data. Improper validation of ioctl parameters in kernel drivers can lead to memory corruption or denial of service, but no explicit impact or exploitation details are given. No known exploits in the wild have been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation is provided in the available information. Users should monitor the Microsoft Security Response Center for updates.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_vex
- Csaf Version
- 2.0
- Publisher
- Microsoft Security Response Center
- Advisory Id
- msrc_CVE-2026-46197
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a19fed6e29bf47b500fe53c
Added to database: 5/29/2026, 9:02:14 PM
Last enriched: 5/29/2026, 9:15:32 PM
Last updated: 5/31/2026, 4:58:34 AM
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.