CVE-2026-68276
Received Received - Intake

Buffer Overflow in AMDGPU Linux Kernel Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: fix cleaner shader IB buffer overflow The cleaner shader sysfs path allocates a 16-dword (64 byte) IB but incorrectly fills (align_mask + 1) dwords. On GFX rings align_mask is 0xff, so the loop wrote 256 dwords into a 64-byte buffer, causing a kernel page fault. The IB only needs to be a minimal NOP shell to schedule the job; the cleaner shader itself is emitted on the ring via emit_cleaner_shader(). Fill 16 dwords to match the allocation. v2: Use ib_size_dw variable (Lijo) (cherry picked from commit bf21af331ebf72d0935fd70c73192414a422c03a)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68276
EUVD
EUVD-2026-55377

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a buffer overflow in the AMD GPU graphics driver. The cleaner shader sysfs path allocates a 64-byte buffer but incorrectly writes 256 dwords (1024 bytes) into it due to a miscalculation in the loop. This causes a kernel page fault when the buffer overflows.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver and may not have direct network detection methods. Check kernel logs for page faults or crashes related to amdgpu/gfx components using commands like dmesg | grep -i amdgpu or journalctl -k | grep -i pagefault.

Impact Analysis

This vulnerability can cause system instability or crashes due to kernel page faults. It may lead to denial-of-service conditions where the system becomes unresponsive or requires a reboot. Users with AMD GPUs could experience graphical issues or system failures.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this issue. Monitor kernel logs for amdgpu-related errors and apply vendor-provided patches if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68276. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart