CVE-2026-68272

A flaw was found in the Linux kernel's drm/amdgpu component. An unprivileged local attacker can exploit this vulnerability by submitting a specially crafted command with a zero-length chunk size for CP_GFX_SHADOW. This leads to improper memory access within the kernel, causing a system crash and a denial of service (DoS).

This issue affects AMDGPU command submission. CP_GFX_SHADOW chunk size not validated in cs pass1. Local GPU users can submit undersized chunks. Systems without AMD GPUs are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.