In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When… (CVE-2026-98905)
Description
A vulnerability in the Linux kernel's drm/amdkfd component related to CRIU restore was resolved. The issue involved missing a call to properly acquire queue buffers in the set_queue_properties_from_criu() function, leading to uninitialized buffer fields in queue_properties. This could cause problems when subsequent code expects these buffer fields to be non-null. The fix added the missing call and corrected type casts.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's drm/amdkfd subsystem was due to the omission of a call to kfd_queue_acquire_buffers() in the set_queue_properties_from_criu() function after it was split from set_queue_properties_from_user(). This omission caused the buffer fields in queue_properties to remain uninitialized during CRIU restore operations, potentially leading to errors or instability when later code assumes these buffers are properly set. The patch added the missing call and corrected casting issues to properly initialize these buffers.
Potential Impact
The impact involves potential instability or errors in the handling of queue buffers during CRIU restore operations in the drm/amdkfd kernel component. The exact consequences are not detailed, but uninitialized buffer fields could lead to unexpected behavior in kernel operations related to AMD GPU device queues.
Mitigation Recommendations
A fix has been applied to the Linux kernel to properly acquire queue buffers in the set_queue_properties_from_criu() function. Users should update to a kernel version that includes the commit 88ed96abbbe27b70193544fbc1ee06448c274714 or later to remediate this issue. No additional mitigation steps are specified.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-m3qx-4j43-w3m8
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-98905"]
Threat ID: 6adbaad9d73cc49347b20715
Added to database: 10/23/2026, 18:43:37 UTC
Last enriched: 10/23/2026, 19:04:35 UTC
Last updated: 10/23/2026, 20:25:11 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.