Live › vulnerability › CVE-2026-98905
Go to dashboardIn the Linux kernel's AMD GPU compute driver (amdkfd), the CRIU checkpoint-restore path never fills in the buffer fields of a queue's properties, so later code can dereference null pointers. The sources do not describe an attacker-facing effect beyond this kernel crash risk.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Properly acquire queue buffers in CRIU restore
When kfd_queue_acquire_buffers() was split off from set_queue_properties_from_user(), set_queue_properties_from_criu() was missed. Thus, set_queue_properties_from_criu() is not filling out the buffer fields of queue_properties, which can come up when subsequent code expects them to be non-null.
Add the proper call to kfd_queue_acquire_buffers(), and also use the right cast types in set_queue_properties_from_criu() (which were missed at the same time)
(cherry picked from commit 88ed96abbbe27b70193544fbc1ee06448c274714)
This page as .md · .json · in your agent: get_signal("CVE-2026-98905")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.