CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation total_cwsr_size was computed in 32-bit before being used as a BO/SVM allocation size. With large ctx_save_restore_area_size and debug_memory_size multiplied by the XCC count, the product can wrap, yielding an undersized CWSR save area that firmware later overruns. Promote total_cwsr_size to u64 and use check_add_overflow()/ check_mul_overflow() in both kfd_queue_acquire_buffers() and kfd_queue_release_buffers(). (cherry picked from commit 319f7e13423ae3f486b9aea82f9ad2d6af0ee608)
Засегнати продукти
- Linux Linux: 325aa07165394b8e866ffe9ec1d4c99d9195b2f2 преди b88ffe6593607364a8c06a48c6f29e55437cdf8e; d15deafab5d722afb9e2f83c5edcdef9d9d98bd1 преди abce3276c57e36c955627307469b9f009057a467; d15deafab5d722afb9e2f83c5edcdef9d9d98bd1 преди 865532d54eb57b660b1cb1b0e1755776ce21b849; d15deafab5d722afb9e2f83c5edcdef9d9d98bd1 преди 2b0386d4293920e690c0e017708f999b93cc729b; 63600103d2ac5c09fdeec5b931b396e4e0efd5d8; 6.12.59 преди 6.12.101; 6.17.9 преди 6.18
- Linux Linux: 6.18; преди 6.18; 6.12.101 до 6.12.*; 6.18.42 до 6.18.*; 7.1.6 до 7.1.*; 7.2 до *
Вид слабост
История
- 10 август 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-68257
- https://nvd.nist.gov/vuln/detail/CVE-2026-68257
- https://git.kernel.org/stable/c/b88ffe6593607364a8c06a48c6f29e55437cdf8e
- https://git.kernel.org/stable/c/abce3276c57e36c955627307469b9f009057a467
- https://git.kernel.org/stable/c/865532d54eb57b660b1cb1b0e1755776ce21b849
- https://git.kernel.org/stable/c/2b0386d4293920e690c0e017708f999b93cc729b