CVE-2026-53325

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1.2-1.1

Description A NULL pointer dereference occurs in the AMD64 AGP driver when operating in virtualized environments, such as qemu/kvm, that lack a physical AMD northbridge. The issue stems from broken error propagation in the agp amd64 probe() function. Specifically, when cache nbs() returns -ENODEV to indicate the absence of hardware, the probe function incorrectly checks if the return value is exactly -1 instead of checking if it is less than 0. This allows the driver to proceed with initialization and call agp add bridge(), which subsequently triggers amd64 fetch size(). Because the hardware is missing, node to amd nb(0) returns NULL, resulting in a General Protection Fault (GPF) when the system attempts to access the misc member of that pointer.

Recommendations Update the Linux kernel to version 7.1.2-1.1 or later.