CVE-2026-80747
Received Received - Intake

Bounds Check Bypass in Linux Kernel KFD CRAT Parser

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype header fits within the image, but does not verify that the advertised subtype length fits. A malformed CRAT table with an oversized length field causes out-of-bounds reads when kfd_parse_subtype() casts the header to specific subtype structures. Add validation that sub_type_hdr + length does not exceed the image boundary before parsing the subtype contents. (cherry picked from commit 48e1d1e6e8798aef0312e68d8e586021b5b3cf4d)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-80747
EUVD
EUVD-2026-70351

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a missing bounds check in the CRAT parser. When parsing a malformed CRAT table, an oversized length field can cause out-of-bounds reads during subtype parsing. The fix adds validation to ensure the subtype length does not exceed the image boundary before processing.

Detection Guidance

This vulnerability involves a bounds check issue in the Linux kernel's CRAT parser. Detection requires checking kernel logs for out-of-bounds read errors or crashes related to the amdkfd module. Monitor system logs for segmentation faults or kernel panics involving drm/amdkfd. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow an attacker to trigger out-of-bounds memory reads by providing a malformed CRAT table. This may lead to system instability, crashes, or potential information disclosure if sensitive memory is accessed.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If immediate patching is not possible, disable the amdkfd module temporarily to prevent exploitation. Monitor vendor advisories for kernel updates addressing this issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80747. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart