Skip to main content

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When… (CVE-2026-98905)

0
Medium
Published: 10/23/2026 (10/23/2026, 12:31:37 UTC)
Source: GCVE Database

Description

A vulnerability in the Linux kernel's drm/amdkfd component related to CRIU restore was resolved. The issue involved missing a call to properly acquire queue buffers in the set_queue_properties_from_criu() function, leading to uninitialized buffer fields in queue_properties. This could cause problems when subsequent code expects these buffer fields to be non-null. The fix added the missing call and corrected type casts.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 10/23/2026, 19:04:35 UTC

Technical Analysis

The vulnerability in the Linux kernel's drm/amdkfd subsystem was due to the omission of a call to kfd_queue_acquire_buffers() in the set_queue_properties_from_criu() function after it was split from set_queue_properties_from_user(). This omission caused the buffer fields in queue_properties to remain uninitialized during CRIU restore operations, potentially leading to errors or instability when later code assumes these buffers are properly set. The patch added the missing call and corrected casting issues to properly initialize these buffers.

Potential Impact

The impact involves potential instability or errors in the handling of queue buffers during CRIU restore operations in the drm/amdkfd kernel component. The exact consequences are not detailed, but uninitialized buffer fields could lead to unexpected behavior in kernel operations related to AMD GPU device queues.

Mitigation Recommendations

A fix has been applied to the Linux kernel to properly acquire queue buffers in the set_queue_properties_from_criu() function. Users should update to a kernel version that includes the commit 88ed96abbbe27b70193544fbc1ee06448c274714 or later to remediate this issue. No additional mitigation steps are specified.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
GHSA-m3qx-4j43-w3m8
Osv Schema Version
1.4.0
Aliases
["CVE-2026-98905"]

Threat ID: 6adbaad9d73cc49347b20715

Added to database: 10/23/2026, 18:43:37 UTC

Last enriched: 10/23/2026, 19:04:35 UTC

Last updated: 10/23/2026, 20:25:11 UTC

Views: 3

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses