CVE-2026-74448
kernel: drm/amdkfd: fix QID bit leak in pqm_create_queue()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's drm/amdkfd component. When a process attempts to create its first queue, a failure in memory allocation can cause the pqm_create_queue() function to exit prematurely without releasing a reserved Queue ID (QID) bit. This leads to a permanent leak of QID slots. Over time, this resource exhaustion can prevent new queues from being created, resulting in a Denial of Service (DoS) for affected systems.
Statement
This vulnerability is evaluated with a Low severity impact because successful exploitation requires local unprivileged access, supported AMD GPU hardware, and an uncommon kernel memory allocation failure during process initialization. In standard Red Hat Enterprise Linux installations that do not utilize AMD GPU acceleration, the affected code path is not invoked. Furthermore, the issue only manifests under specific memory pressure scenarios, limiting the blast radius to local resource exhaustion for compute queue allocation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-911 · Improper Update of Reference Count