CVE-2026-68447

A flaw was found in the Linux kernel's drm/amdkfd component. The Checkpoint/Restore in Userspace (CRIU) checkpoint process, which saves and restores the state of a running application, incorrectly copies the Memory Queue Descriptor (MQD) control stack. This occurs because the copy operation does not properly limit the amount of data copied to the allocated buffer size. A local attacker could exploit this by causing the system to read beyond the intended memory region, potentially leading to the disclosure of sensitive kernel data to userspace.

This vulnerability is classified as Moderate rather than Important because successful exploitation requires authenticated local access on systems equipped with compatible AMD graphics hardware, and the outcome is limited to an out-of-bounds memory read rather than arbitrary code execution. Under typical enterprise deployments, the affected checkpointing path in the GPU driver is only exercised when saving application state for specialized compute workloads. Systems without AMD graphics hardware or environments where unprivileged users lack direct interaction with GPU compute interfaces remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.