CVE-2026-97497
Received Received - Intake

Bounds Check Failure in AMDKFD Linux Kernel Driver

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id allocate_sdma_queue has an option where the sdma queue id can be specified (used by CRIU). We weren't bounds-checking that value. Confirm it's less than the maximum number of queues.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97497
EUVD
EUVD-2026-86095

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a lack of bounds checking for the sdma queue id parameter in the allocate_sdma_queue function. This function allows specifying a queue id, which is used by CRIU (Checkpoint/Restore In Userspace). The issue is that the provided queue id was not validated to ensure it was within the allowed range of available queues.

Detection Guidance

This vulnerability involves a bounds check issue in the Linux kernel's drm/amdkfd component. Detection requires checking kernel logs for related errors or examining the amdkfd driver for improper queue id handling. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow an attacker to specify an invalid sdma queue id, potentially causing a buffer overflow or out-of-bounds access. This might lead to system crashes, privilege escalation, or other unintended behavior in the Linux kernel, depending on how the affected function is used in the system.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Monitor kernel updates from your distribution and update to a patched version. No specific mitigation steps are detailed in the provided context.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97497. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart