CVE-2026-53374
Received Received - Intake

Memory Corruption in AMDGPU Linux Kernel Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not after mapping. Since amdgpu_bo_create_kernel() does not zero-initialize the buffer, when a single PTE is written the TLB may speculatively load other uninitialized entries from the same cacheline. Those garbage entries can appear valid, and a subsequent write to another PTE in the same cacheline may cause the GPU to use a stale garbage PTE from the TLB. Fix this by calling memset_io() to zero-initialize the GART table with gart_pte_flags immediately after allocation. Using AMDGPU_GEM_CREATE_VRAM_CLEARED, SDMA-based clear will not work since SDMA needs GART to be initialized to work. (cherry picked from commit d9af8263b82b6eaa60c5718e0c6631c5037e4b24)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-53374
EUVD
EUVD-2026-45447

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
amd linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the AMD GPU driver (amdgpu). When allocating memory for the GART table, the buffer is not zero-initialized. This can lead to speculative loading of uninitialized entries from the cacheline, causing the GPU to use invalid memory mappings. The fix involves zeroing the GART table immediately after allocation.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMDGPU driver and requires kernel-level inspection. Detection involves checking kernel logs for GPU-related errors or verifying if the kernel version includes the fix. Commands like dmesg | grep amdgpu or checking kernel version with uname -a may help identify affected systems.

Impact Analysis

This vulnerability could allow an attacker to cause memory corruption or unexpected behavior in the GPU, potentially leading to system instability, crashes, or unauthorized access to sensitive data processed by the GPU.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level memory corruption issue in the Linux kernel's AMDGPU driver that could lead to GPU memory corruption or incorrect memory access. Compliance impacts would only occur if this vulnerability were exploited to access or leak sensitive data, which is not described in the provided context.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this AMDGPU GART table initialization issue. If an update is unavailable, consider disabling AMDGPU or restricting GPU usage until patched. Monitor vendor advisories for official patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53374. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart