CVE-2026-31765

A flaw was found in the Linux kernel's AMDGPU driver. On systems configured with 64KB page sizes, a mismatch between the reserved trap area size and the allocated memory for the Kernel Fusion Driver (KFD) can lead to a kernel crash. A local user running specific applications, such as rocminfo or rccl unit tests, can trigger this issue, resulting in a Denial of Service (DoS) due to a NULL pointer dereference.

This vulnerability is rated as Moderate severity because it requires local execution privileges and only manifests on systems configured with 64KB memory pages utilizing AMD graphics hardware. Under these specific architecture configurations, an unprivileged local user initiating GPU compute tasks can trigger a NULL pointer dereference in the kernel driver, causing an operating system crash. Standard enterprise deployments utilizing default 4KB page sizes are unaffected as allocation boundaries remain aligned. The flaw affects availability only, without facilitating privilege elevation or unauthorized data exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.