CVE-2026-63878

A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker can exploit an integer overflow vulnerability by providing an excessively large value for the num_entries parameter in the GEM_OP GET_MAPPING_INFO ioctl. This can lead to an attempt to allocate an extremely large amount of memory, resulting in a kernel warning, system taint, and potentially a system panic, causing a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because exploitation is restricted to local authenticated users with access to AMD GPU device nodes and results strictly in a denial of service without compromising system confidentiality or integrity. The vulnerability specifically targets environments running systems with AMD graphics processing units where the kernel driver is actively handling rendering or compute requests. Systems without dedicated AMD GPU devices or enterprise servers running headless configurations without exposed GPU device files are not exposed to this risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.