CVE-2026-63879

A flaw was found in the Linux kernel, specifically within the drm/amdgpu component. This vulnerability arises from incorrect handling of a notifier sequence in the amdgpu_hmm_range_get_pages function, where the sequence can be read more than once. This can lead to the system processing invalid memory pages, potentially resulting in system instability or crashes.

This vulnerability is rated as an Important impact for Red Hat Enterprise Linux because local authenticated users on systems with AMD graphics hardware can exploit improper memory page handling to compromise kernel memory integrity or cause a denial of service. Although exploiting the flaw requires local system access and interaction with the amdgpu driver, administrative privileges are not needed to trigger the condition. Headless environments or systems running non-AMD graphics hardware do not load the affected module and are not exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.