CVE-2026-74446

A flaw was found in the drm/amdkfd component of the Linux kernel. A race condition exists in the kfd_criu_checkpoint_events() function where a mutex is not consistently held during event checkpointing. This allows a local attacker to cause memory corruption, potentially leading to privilege escalation or a denial of service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the amdgpu kernel module from loading on systems where AMD GPU compute or display hardware is not required.

1. Blacklist the module by executing the following command as root:

echo "install amdgpu /bin/true" > /etc/modprobe.d/disable-amdgpu.conf

2. If the module is currently loaded into kernel memory, a system reboot is required to fully unload it, or attempt to unload it manually:

rmmod amdgpu

Warning: Unloading the kernel module or rebooting the host will interrupt running services and terminate graphical sessions. Caveat: Disabling the amdgpu driver prevents hardware graphics acceleration and compute functionality on systems equipped with AMD Radeon or Instinct GPUs. Ensure alternative console access is available.