CVE-2026-68257

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow occurs in the drm/amdkfd component during the calculation of the total cwsr size variable. Because this value is computed using 32-bit integers before being used for BO/SVM allocation, large values of ctx save restore area size and debug memory size multiplied by the XCC count can cause the product to wrap. This results in an undersized CWSR save area, which can be subsequently overrun by firmware. The issue involves the kfd queue acquire buffers() and kfd queue release buffers() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.