In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add upper bound check for num_of_nodes drm/amdkfd: Add upper bound… (CVE-2026-53376)

The Linux kernel contained a vulnerability in the drm/amdkfd component where the num_of_nodes parameter lacked an upper bound check in the kfd_ioctl_get_process_apertures_new ioctl handler. This could lead to an availability impact. The issue was fixed by adding an upper bound check to prevent improper handling of this parameter. The fix is included in Linux kernel versions starting from 6.8.0-1061.64~22.04.1 and later. The vulnerability has a CVSS 3.1 score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), indicating a local attacker with low privileges could cause denial of service. The vendor advisory from Ubuntu confirms the availability of patches and recommends updating to the fixed kernel versions.

The vulnerability impacts system availability by potentially causing denial of service conditions. There is no impact on confidentiality or integrity. Exploitation requires local access with low privileges. No known exploits are reported in the wild. The medium severity rating reflects the limited scope and impact of the vulnerability.

A patch is available and has been released by the Linux kernel maintainers and Ubuntu. Users should update their Linux kernel packages to versions 6.8.0-1061.64~22.04.1 or later as provided by their distribution and reboot the system to apply the fix. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be necessary. No additional mitigation actions are required beyond applying the official update.