CVE-2026-80747

A flaw was found in the drm/amdkfd component of the Linux kernel. A remote attacker could exploit this vulnerability by providing a malformed Cache Region Allocation Table (CRAT) with an oversized length field. This oversight in the CRAT parser, which validates the subtype header but not its advertised length, leads to out-of-bounds reads when processing subtype structures. This could result in information disclosure or a denial of service.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and is limited to systems equipped with AMD GPU hardware running the amdgpu or amdkfd driver. An attacker capable of presenting an invalid table during GPU topology discovery could trigger an out-of-bounds read, potentially leading to a system crash or denial of service rather than arbitrary code execution. Systems lacking AMD graphics or compute hardware, or installations where the driver is not initialized, are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.