CVE Database›Document archive›CVE-2026-74448

CVE-2026-74448

kernel: drm/amdkfd: fix QID bit leak in pqm_create_queue()

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 15, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's drm/amdkfd component. When a process attempts to create its first queue, a failure in memory allocation can cause the pqm_create_queue() function to exit prematurely without releasing a reserved Queue ID (QID) bit. This leads to a permanent leak of QID slots. Over time, this resource exhaustion can prevent new queues from being created, resulting in a Denial of Service (DoS) for affected systems.

Statement

This vulnerability is evaluated with a Low severity impact because successful exploitation requires local unprivileged access, supported AMD GPU hardware, and an uncommon kernel memory allocation failure during process initialization. In standard Red Hat Enterprise Linux installations that do not utilize AMD GPU acceleration, the affected code path is not invoked. Furthermore, the issue only manifests under specific memory pressure scenarios, limiting the blast radius to local resource exhaustion for compute queue allocation.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-911 · Improper Update of Reference Count