PT-2026-44352

CVE-2026-46229

·

Published

2026-04-17

·

Updated

2026-10-21

Description by

CVSS 2.0
7.7
High
MetricsAV:A/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue in the drm/amdkfd component allows stale data exposure during VRAM allocation. While the GEM ioctl path correctly sets the AMDGPU GEM CREATE VRAM CLEARED flag for userspace allocations via amdgpu gem create ioctl() and amdgpu mode dumb create(), the KFD path lacks this flag. Consequently, freshly allocated VRAM may contain remnants from previous use, such as stale page table data, which can be observed by compute kernels. This can lead to crashes in RCCL P2P transport due to the corruption of the protocol handshake caused by non-zero data in the ptrExchange, head, and tail fields.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
AZL-89024
CLSA-2026-1788168285
ECHO-6269-C44C-52C3
OPENSUSE-SU-2026:10954-1
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:22521-1
SUSE-SU-2026:22522-1
SUSE-SU-2026:22665-1
SUSE-SU-2026:22666-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:2799-1
SUSE-SU-2026:2800-1
SUSE-SU-2026:2840-1
SUSE-SU-2026:2841-1
SUSE-SU-2026:3044-1
SUSE-SU-2026:3089-1
SUSE-SU-2026:3156-1
USN-8566-1
USN-8567-1
USN-8568-1
USN-8569-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8593-1
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8603-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8618-1
USN-8619-1
USN-8663-1
USN-8664-1
USN-8665-1
USN-8728-1
USN-8728-2
USN-8728-3
Found an issue in the description? Have something to add? Feel free to write us 👾