CVE-2026-97495
kernel: drm/amdkfd: Check bounds on allocate_doorbell
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · October 9, 2026
Description
A flaw was found in the Linux kernel's AMD GPU driver (amdkfd). A local user could exploit this vulnerability to cause a Denial of Service (DoS) or kernel memory corruption by supplying an out-of-bounds doorbell identifier during queue allocation. The issue occurs because the doorbell allocation mechanism fails to validate whether the requested identifier is within permitted limits before updating internal tracking structures.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input