CVE-2026-45853

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() amdgpu_discovery_get_nps_info() internally allocates memory for ranges using kvcalloc(), which may use vmalloc() for large allocation. Using kfree() to release vmalloc memory will lead to a memory corruption. Use kvfree() to safely handle both kmalloc and vmalloc allocations. Compile tested only. Issue found using a prototype static analysis tool and code review. A flaw was found in the Linux kernel’s drm/amdgpu component. The amdgpu_discovery_get_nps_info() function incorrectly deallocates memory by using kfree() instead of kvfree(), even when memory was allocated with kvcalloc() which may use vmalloc(). This improper memory handling can lead to memory corruption. Such a vulnerability could potentially be exploited by a local attacker to cause system instability or escalate privileges.

Live-patch status from KernelCare for each operating system.