CVE-2026-63878
Received Received - Intake

Integer Overflow in AMDGPU GEM_OP GET_MAPPING_INFO

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO kvcalloc(args->num_entries, sizeof(*vm_entries), GFP_KERNEL) at amdgpu_gem.c:1050 uses the user-supplied num_entries directly without any upper bounds check. Since num_entries is a __u32 and sizeof(drm_amdgpu_gem_vm_entry) is 32 bytes, a large num_entries produces an allocation exceeding INT_MAX, triggering WARNING in __kvmalloc_node_noprof(), causing a kernel WARNING, TAINT_WARN, and panic on CONFIG_PANIC_ON_WARN=y systems. Add a size bounds check before we invoke the kvzalloc() to reject oversized num_entries early with -EINVAL. (cherry picked from commit 1fe7bf5457f6efd7be60b17e23163ba54341d73d)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63878
EUVD
EUVD-2026-45763

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the AMD GPU driver where a user-supplied value (num_entries) is used directly in a memory allocation without checking if it exceeds safe limits. This can cause the kernel to attempt allocating an excessively large memory block, leading to a kernel warning, system taint, and potential crash if panic-on-warn is enabled.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver and requires kernel-level detection. Check kernel logs for warnings like 'WARNING in __kvmalloc_node_noprof()' or 'TAINT_WARN' after triggering GPU operations. Monitor for kernel panics if CONFIG_PANIC_ON_WARN is enabled.

Impact Analysis

If exploited, this flaw could cause system instability, crashes, or denial of service by triggering kernel panics. It may also allow local users to escalate privileges or cause unexpected behavior in systems running vulnerable Linux kernels with AMD GPU drivers.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA. It is a kernel-level memory allocation issue in the Linux AMD GPU driver that could cause system instability or crashes, but it does not involve data breaches or unauthorized access to sensitive information.

Mitigation Strategies

Update your Linux kernel to a patched version that includes the fix for CVE-2026-63878. If immediate patching is not possible, restrict access to GPU-related operations or disable the AMD GPU driver until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63878. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart