CVE-2026-45878

A flaw was found in the Linux kernel's AMD KFD (Kernel Fusion Driver) component. A local user could exploit a boundary error in the debug address watch v2 functionality by providing a specially crafted watch_id. This could lead to a buffer overflow, potentially allowing memory access outside of intended bounds and causing system instability or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the amdgpu kernel module from loading if AMD GPU hardware is not required on the system.

1. Create a configuration file in /etc/modprobe.d/ to blacklist the module:

echo "blacklist amdgpu" > /etc/modprobe.d/amdgpu-blacklist.conf
echo "install amdgpu /bin/true" >> /etc/modprobe.d/amdgpu-blacklist.conf

2. If the module is already loaded, unload it or reboot the machine:

rmmod amdgpu

Caveats: Disabling the amdgpu driver will prevent graphical output, video acceleration, and compute functionality on systems equipped with AMD Radeon graphics hardware.

Warning: Unloading active kernel modules or applying configuration changes may require a full system restart to take effect if the driver is currently in use by the display server or running applications.