CVE-2026-53143

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow exists in the drm/amdkfd component during the checkpoint and restore process of SDMA queues on GFX11. The v11 MQD manager incorrectly uses CP-compute variants of the checkpoint mqd() and restore mqd() functions for KFD MQD TYPE SDMA queues. These functions utilize a 2048-byte size instead of the required 512-byte size for the v11 sdma mqd structure, resulting in a 1536-byte overflow. During a CRIU checkpoint on Navi3x, checkpoint mqd() may leak 1536 bytes of adjacent GTT memory to userspace. During a CRIU restore, restore mqd() may corrupt 1536 bytes of adjacent GTT memory, potentially affecting the ring buffer or neighboring MQDs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.