CVE-2026-97496

A flaw was found in the Linux kernel's AMD GPU driver (amdkfd). A local attacker can trigger this vulnerability during process restoration by supplying manipulated queue descriptor values that lack proper boundary validation. This issue results in an out-of-bounds memory read, potentially exposing sensitive kernel memory to user space.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Blacklist the amdgpu kernel module to prevent it from loading on systems where AMD GPU hardware is not required:

1. Add the module to the blacklist configuration:

echo "blacklist amdgpu" >> /etc/modprobe.d/blacklist-amdgpu.conf

2. Prevent the module from being loaded:

echo "install amdgpu /bin/true" >> /etc/modprobe.d/blacklist-amdgpu.conf

Caveat: Disabling the amdgpu driver prevents hardware display acceleration and compute capabilities on systems equipped with AMD GPUs.

Warning: If the amdgpu module is already loaded in the running kernel, a system reboot is required for these configuration changes to take effect.