CVE-2026-74448

Received Received - Intake

Memory Leak in AMDKFD Kernel Queue Management

Publication date: 2026-08-15

Last updated on: 2026-08-18

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix QID bit leak in pqm_create_queue() When MES is enabled and amdgpu_amdkfd_alloc_kernel_mem() fails during the first queue creation for a process, pqm_create_queue() returns early via 'return retval' without going through the err_create_queue cleanup label. This means clear_bit(*qid, pqm->queue_slot_bitmap) is never called, leaving the reserved QID bit permanently set in queue_slot_bitmap. Over time this leaks QID slots, potentially exhausting all available queue slots. Fix this by replacing 'return retval' with 'goto err_allocate_pqn' so that clear_bit() is always called on the error path without touching the uninitialized pqn pointer. AILIKFD-813 (cherry picked from commit a107f74c38edbb80d6ab64dcaeeb292c14e9779f)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-18

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74448

EUVD

EUVD-2026-59755

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability where a queue ID (QID) bit leak occurs during queue creation in the AMDKFD driver. When a memory allocation fails during the first queue creation for a process, the cleanup step that clears the reserved QID bit is skipped. This permanently reserves the QID slot, eventually exhausting all available queue slots.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMDKFD driver and relates to a QID bit leak during queue creation. Detection requires checking kernel logs for AMDKFD-related errors or examining the queue_slot_bitmap for unexpected bit states. Commands like dmesg | grep amdkfd or checking /sys/kernel/debug/dri/0/amdgpu_pm_info may help identify issues.

Impact Analysis

If you use systems with AMD GPUs and the Linux kernel's AMDKFD driver, this vulnerability could cause queue slots to be exhausted over time. This may lead to failures in creating new GPU queues, disrupting graphics processing or compute workloads that rely on these queues.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a resource exhaustion issue in the Linux kernel's AMDKFD driver. Compliance impacts would only occur if the vulnerability led to unauthorized data access or service disruption, which is not described here.

Mitigation Strategies

Apply the kernel patch that fixes the QID bit leak in pqm_create_queue(). Update to a Linux kernel version that includes the fix. If immediate patching is not possible, disable MES (Micro Engine Scheduler) in the AMDGPU driver as a temporary workaround.

Hi! I’m here to help you understand CVE-2026-74448. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70