CVE-2026-68257

A flaw was found in the Linux kernel's drm/amdkfd component. An integer overflow vulnerability exists in the calculation of a memory allocation size. When processing large input values, this calculation can result in an undersized memory region, which can then be overrun by firmware. This could lead to system instability or a denial of service.

This vulnerability is evaluated with a Moderate impact for Red Hat Enterprise Linux because exploitation requires local user access on hosts equipped with compatible AMD graphics hardware. Standard deployments that do not utilize AMD GPU compute capabilities or do not expose direct hardware device nodes to unprivileged users are not exposed under default configurations. While an attacker with local access to the GPU compute subsystem could trigger an arithmetic wrap resulting in memory corruption or a host crash, the flaw cannot be leveraged remotely.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.