CVE-2026-45853: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() amdgpu_discovery_get_nps_info() internally allocates memory for ranges using kvcalloc(), which may use vmalloc() for large allocation. Using kfree() to release vmalloc memory will lead to a memory corruption. Use kvfree() to safely handle both kmalloc and vmalloc allocations. Compile tested only. Issue found using a prototype static analysis tool and code review.

Засегнати продукти

• Linux Linux: b194d21b9bcc15b50df1bc3ff7428e51c2918a6f преди 16e7e7ad8cdc6b4c4af7f31e262f1494c1b2a55e; b194d21b9bcc15b50df1bc3ff7428e51c2918a6f преди 9ae85b0c1909b6c6bfd2636b04cdaf7f520bf2b5; b194d21b9bcc15b50df1bc3ff7428e51c2918a6f преди f441538893eba6347b983f2904819ca6c99da65e; b194d21b9bcc15b50df1bc3ff7428e51c2918a6f преди 0c44d61945c4a80775292d96460aa2f22e62f86c
• Linux Linux: 6.11; преди 6.11; 6.12.75 до 6.12.*; 6.18.14 до 6.18.*; 6.19.4 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-45853
• https://nvd.nist.gov/vuln/detail/CVE-2026-45853
• https://git.kernel.org/stable/c/16e7e7ad8cdc6b4c4af7f31e262f1494c1b2a55e
• https://git.kernel.org/stable/c/9ae85b0c1909b6c6bfd2636b04cdaf7f520bf2b5
• https://git.kernel.org/stable/c/f441538893eba6347b983f2904819ca6c99da65e
• https://git.kernel.org/stable/c/0c44d61945c4a80775292d96460aa2f22e62f86c