CVE-2026-53144

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL dereference exists in the get queue ids() function within the drm/amdkfd component. When the usr queue id array is NULL and num queues is non-zero, the function returns NULL. Because the calling functions only verify the return value using IS ERR(), and IS ERR(NULL) is false, the check is bypassed. This leads suspend queues() to call q array invalidate(), which dereferences the NULL pointer while iterating, resulting in a kernel panic. Userspace can trigger this condition via the kfd ioctl set debug trap() function by providing a num queues value greater than 0 while setting the queue array ptr to zero.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.