CVE-2026-74446

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/amdkfd component where the kfd criu checkpoint events() function fails to hold the p->event mutex while counting and iterating through entries in p->event idr via kfd get num events(). Because the CRIU checkpoint caller only holds p->mutex, and the kfd event create() and kfd event destroy() functions only acquire p->event mutex, a concurrent thread can modify events between the counting and walking phases. This can lead to a buffer overflow if an event is inserted, as the walk writes past the end of the ev privs allocation, or a use-after-free scenario if an event is removed and the walk dereferences a freed entry.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.