CVE-2026-97429

A flaw was found in the Linux kernel's AMD KFD (Kernel Fusion Driver) subsystem. A race condition occurs during queue destruction when internal locks are released while waiting for a queue to resume, allowing a concurrent destroy operation to prematurely free the queue object. A local user could exploit this use-after-free flaw to cause a Denial of Service (DoS) by crashing the system or potentially escalate privileges.

This flaw is evaluated as having a Moderate impact because exploitation requires an authenticated local user with access to the AMD KFD compute interface and depends on winning a tightly timed race condition during concurrent queue termination. Systems are only susceptible if AMD graphics processing units are installed and the corresponding kernel driver is active, which is uncommon across standard enterprise server deployments. While successful exploitation could destabilize the kernel or lead to privilege escalation, the attack vector is restricted to local execution and requires specialized hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.