CVE-2026-63878

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/amdgpu component where the kvcalloc() function in amdgpu gem.c uses the user-supplied num entries variable without an upper bounds check. Because num entries is a u32 and the size of drm amdgpu gem vm entry is 32 bytes, providing a large value for num entries can result in an allocation that exceeds INT MAX. This triggers a warning in kvmalloc node noprof(), leading to a kernel warning, a taint warning, and a system panic on systems where CONFIG PANIC ON WARN=y is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.