CVE-2026-68258
Received Received - Intake

Bounds Check Failure in AMDKFD Linux Kernel Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the values provided in the private data in kfd CRIU restore were within bounds. For queue type, add a KFD_QUEUE_TYPE_MAX and ensure the provided type is less than it. For mqd_size, add new function mqd_size_from_queue_type and confirm that the provided mqd_size matches expectations. (cherry picked from commit f19d8086f6644083c913d70bfdeee20e1b6f46a5)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68258
EUVD
EUVD-2026-55359

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves insufficient bounds checking during CRIU (Checkpoint/Restore In Userspace) restore operations for AMDKFD (AMD GPU kernel fusion driver). Specifically, it fails to validate queue type and mqd size values provided in private data, potentially allowing out-of-bounds access.

Detection Guidance

This vulnerability affects the Linux kernel's drm/amdkfd component during CRIU restore operations. Detection requires checking kernel logs for errors related to queue type or mqd size mismatches during CRIU restore processes. Monitor logs for KFD-related errors or crashes during checkpoint/restore operations.

Impact Analysis

This vulnerability could allow local attackers to cause denial-of-service conditions or execute arbitrary code in the kernel context. It may lead to system crashes, privilege escalation, or unauthorized access to sensitive data on affected systems.

Mitigation Strategies

Apply the latest Linux kernel security patches that include the fix for this issue. If immediate patching is not possible, restrict use of CRIU restore operations until the patch is applied. Monitor kernel logs for any signs of exploitation attempts targeting this vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68258. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart