CVE-2026-68276

A flaw was found in the Linux kernel's drm/amdgpu/gfx component. A local attacker could exploit a buffer overflow vulnerability in the cleaner shader's sysfs path. This occurs because the system incorrectly writes 256 double words (dwords) into a buffer allocated for only 16 dwords (64 bytes). Successful exploitation leads to a kernel page fault, causing a denial of service (DoS) on the system.

This vulnerability is rated as Moderate impact because exploitation requires local authenticated access on systems equipped with AMD graphics hardware running the amdgpu driver, limiting the attack vector. While triggering the flawed cleaner shader sysfs routine can cause a kernel crash resulting in a denial of service, it cannot be reached remotely or on systems lacking the affected GPU devices. Consequently, general enterprise server environments without dedicated AMD graphics adapters remain unaffected by this defect.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.