CVE-2026-46197

HIGH

drm/amdkfd: validate SVM ioctl nattr against buffer size

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: validate SVM ioctl nattr against buffer size Validate nattr field against the buffer size, preventing out-of-bounds buffer access via user-controlled attribute count. (cherry picked from commit 5eca8bfdfa456c3304ca77523718fe24254c172f)

References (7)

Core 7

Scores

CVSS v3 7.8
EPSS 0.0014
EPSS Percentile 3.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (34)
linux/Kernel 5.14.0 - 5.15.209linux
linux/Kernel 5.16.0 - 6.1.175linux
linux/Kernel 6.13.0 - 6.18.32linux
linux/Kernel 6.19.0 - 7.0.9linux
linux/Kernel 6.2.0 - 6.6.140linux
linux/Kernel 6.7.0 - 6.12.90linux
Linux/Linux < 5.14
Linux/Linux < 6.12.90
Linux/Linux < 6.18.32
Linux/Linux < 6.6.140
... and 24 more
Published May 28, 2026
Tracked Since May 28, 2026