CVE-2026-98177

Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid integer underflow in EOP ring size calculation. The low 6 bits of cp_hqd_eop_control store the base-2 logarithm of the EOP ring size. This was calculated as order_base_2(q->eop_ring_buffer_size / 4) - 1 But order_base_2 can in theory return 0, so this could underflow (although in practice the ring buffer size cannot be less than 4096). Change this to order_base_2(q->eop_ring_buffer_size / 8) using properties of logarithms. Also add to the above comment to make the mathematics more clear. (cherry picked from commit f0f43fcf8b2b3a924cad9444340921c96ed5f634)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98177

EUVD

EUVD-2026-93105

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	d696d536f0a97ac779d6176107ac4e96d0a2f8b9
Linux	Linux	d696d536f0a97ac779d6176107ac4e96d0a2f8b9
Linux	Linux	4.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves an integer underflow in the calculation of the EOP ring size for AMDKFD. The issue occurs when the base-2 logarithm of the ring size is computed incorrectly, potentially leading to a negative value due to an underflow. The fix adjusts the calculation to prevent this issue.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMDKFD driver and relates to an integer underflow in EOP ring size calculation. Detection requires checking kernel logs for related errors or examining the AMDKFD driver code for the described issue. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could cause system instability or crashes in systems using the Linux kernel with AMDKFD. It may lead to unexpected behavior in graphics processing or memory management, though the risk is mitigated by practical constraints on ring buffer sizes.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel integer underflow issue in AMDKFD driver ring size calculation. No data exposure or privacy impact is described.

Mitigation Strategies

Apply the Linux kernel patch that resolves the integer underflow in the amdkfd driver's EOP ring size calculation. Update to a kernel version containing the fix from commit f0f43fcf8b2b3a924cad9444340921c96ed5f634.

Hi! I’m here to help you understand CVE-2026-98177. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70