< Back

CVE-2026-68257

Updated on 10 Aug 2026

Severity

7.8 High severity

Details

CVSS score
7.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: fix 32-bit overflow in CWSR total size calculation

total_cwsr_size was computed in 32-bit before being used as a BO/SVM allocation size. With large ctx_save_restore_area_size and debug_memory_size multiplied by the XCC count, the product can wrap, yielding an undersized CWSR save area that firmware later overruns.

Promote total_cwsr_size to u64 and use check_add_overflow()/ check_mul_overflow() in both kfd_queue_acquire_buffers() and kfd_queue_release_buffers().

(cherry picked from commit 319f7e13423ae3f486b9aea82f9ad2d6af0ee608)

Details

Affected product:
AlmaLinux 9.2 ESU , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU
Affected packages:
linux @ 4.19.0 (+12 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 10 Released
32 kernels
  • 6.12.0-211.7.1.el10_2
  • 6.12.0-211.7.3.el10_2
  • 6.12.0-211.20.1.el10_2
  • 6.12.0-211.18.1.el10_2
  • 6.12.0-211.16.1.el10_2
  • 6.12.0-211.22.1.el10_2
  • 6.12.0-211.26.1.el10_2
  • 6.12.0-211.28.1.el10_2
  • 6.12.0-211.29.1.el10_2
  • 6.12.0-211.30.1.el10_2
  • 6.12.0-211.31.1.el10_2
  • 6.12.0-211.32.1.el10_2
  • 6.12.0-211.7.4.el10_2
  • 6.12.0-211.33.1.el10_2
  • 6.12.0-211.34.1.el10_2
  • 6.12.0-211.37.1.el10_2
  • 6.12.0-211.38.1.el10_2
  • 6.12.0-211.39.1.el10_2
  • 6.12.0-211.40.1.el10_2
  • 6.12.0-211.43.1.el10_2
  • 6.12.0-211.44.1.el10_2
  • 6.12.0-211.46.1.el10_2
  • 6.12.0-211.47.1.el10_2
  • 6.12.0-211.49.1.el10_2
  • 6.12.0-211.50.1.el10_2
  • 6.12.0-211.51.1.el10_2
  • 6.12.0-211.53.1.el10_2
  • 6.12.0-211.55.1.el10_2
  • 6.12.0-211.54.1.el10_2
  • 6.12.0-211.56.1.el10_2
  • 6.12.0-211.58.1.el10_2
  • 6.12.0-211.59.1.el10_2
AlmaLinux 9 Released
33 kernels
  • 5.14.0-687.5.1.el9_8
  • 5.14.0-687.5.3.el9_8
  • 5.14.0-687.10.1.el9_8
  • 5.14.0-687.12.1.el9_8
  • 5.14.0-687.13.1.el9_8
  • 5.14.0-687.15.1.el9_8
  • 5.14.0-687.5.4.el9_8
  • 5.14.0-687.17.1.el9_8
  • 5.14.0-687.19.1.el9_8
  • 5.14.0-687.20.1.el9_8
  • 5.14.0-687.22.1.el9_8
  • 5.14.0-687.23.1.el9_8
  • 5.14.0-687.24.1.el9_8
  • 5.14.0-687.25.1.el9_8
  • 5.14.0-687.26.1.el9_8
  • 5.14.0-687.29.1.el9_8
  • 5.14.0-687.30.1.el9_8
  • 5.14.0-687.31.1.el9_8
  • 5.14.0-687.33.1.el9_8
  • 5.14.0-687.34.1.el9_8
  • 5.14.0-687.36.1.el9_8
  • 5.14.0-687.38.1.el9_8
  • 5.14.0-687.39.1.el9_8
  • 5.14.0-687.41.1.el9_8
  • 5.14.0-687.42.1.el9_8
  • 5.14.0-687.44.1.el9_8
  • 5.14.0-687.46.1.el9_8
  • 5.14.0-687.45.1.el9_8
  • 5.14.0-687.48.1.el9_8
  • 5.14.0-687.47.1.el9_8
  • 5.14.0-687.49.1.el9_8
  • 5.14.0-687.50.1.el9_8
  • 5.14.0-687.51.1.el9_8
AlmaLinux 9.6 ESU Planned —
Debian 13 Released
14 kernels
  • 6.12.85-1
  • 6.12.86-1
  • 6.12.88-1
  • 6.12.74-2
  • 6.12.73-1
  • 6.12.63-1
  • 6.12.69-1
  • 6.12.74-1
  • 6.12.90-1
  • 6.12.90-2
  • 6.12.94-1
  • 6.12.95-1
  • 6.12.96-1
  • 6.12.100-1
Oracle Linux 10 Released
18 kernels
  • 6.12.0-211.7.3.el10_2
  • 6.12.0-211.34.1.el10_2
  • 6.12.0-211.37.1.el10_2
  • 6.12.0-211.38.1.el10_2
  • 6.12.0-211.39.1.el10_2
  • 6.12.0-211.40.1.el10_2
  • 6.12.0-211.42.1.el10_2
  • 6.12.0-211.43.1.el10_2
  • 6.12.0-211.44.1.el10_2
  • 6.12.0-211.46.1.el10_2
  • 6.12.0-211.47.1.el10_2
  • 6.12.0-211.49.1.el10_2
  • 6.12.0-211.50.1.el10_2
  • 6.12.0-211.51.1.el10_2
  • 6.12.0-211.53.1.el10_2
  • 6.12.0-211.54.1.el10_2
  • 6.12.0-211.55.1.el10_2
  • 6.12.0-211.56.1.el10_2
Oracle Linux 9 Released
27 kernels
  • 5.14.0-687.5.3.el9_8
  • 5.14.0-687.17.1.el9_8
  • 5.14.0-687.20.1.el9_8
  • 5.14.0-687.19.1.el9_8
  • 5.14.0-687.22.1.el9_8
  • 5.14.0-687.24.1.el9_8
  • 5.14.0-687.23.1.el9_8
  • 5.14.0-687.25.1.el9_8
  • 5.14.0-687.26.1.el9_8
  • 5.14.0-687.29.1.el9_8
  • 5.14.0-687.30.1.el9_8
  • 5.14.0-687.31.1.el9_8
  • 5.14.0-687.33.1.el9_8
  • 5.14.0-687.34.1.el9_8
  • 5.14.0-687.36.1.el9_8
  • 5.14.0-687.38.1.el9_8
  • 5.14.0-687.39.1.el9_8
  • 5.14.0-687.41.1.el9_8
  • 5.14.0-687.42.1.el9_8
  • 5.14.0-687.44.1.el9_8
  • 5.14.0-687.45.1.el9_8
  • 5.14.0-687.46.1.el9_8
  • 5.14.0-687.47.1.el9_8
  • 5.14.0-687.48.1.el9_8
  • 5.14.0-687.49.1.el9_8
  • 5.14.0-687.50.1.el9_8
  • 5.14.0-687.51.1.el9_8
RHEL 10 Released
33 kernels
  • 6.12.0-211.16.1.el10_2
  • 6.12.0-211.7.1.el10_2
  • 6.12.0-211.7.3.el10_2
  • 6.12.0-211.18.1.el10_2
  • 6.12.0-211.20.1.el10_2
  • 6.12.0-211.22.1.el10_2
  • 6.12.0-211.26.1.el10_2
  • 6.12.0-211.28.1.el10_2
  • 6.12.0-211.29.1.el10_2
  • 6.12.0-211.30.1.el10_2
  • 6.12.0-211.31.1.el10_2
  • 6.12.0-211.32.1.el10_2
  • 6.12.0-211.33.1.el10_2
  • 6.12.0-211.34.1.el10_2
  • 6.12.0-211.37.1.el10_2
  • 6.12.0-211.38.1.el10_2
  • 6.12.0-211.39.1.el10_2
  • 6.12.0-211.40.1.el10_2
  • 6.12.0-211.42.1.el10_2
  • 6.12.0-211.43.1.el10_2
  • 6.12.0-211.44.1.el10_2
  • 6.12.0-211.46.1.el10_2
  • 6.12.0-211.47.1.el10_2
  • 6.12.0-211.49.1.el10_2
  • 6.12.0-211.50.1.el10_2
  • 6.12.0-211.51.1.el10_2
  • 6.12.0-211.52.1.el10_2
  • 6.12.0-211.53.1.el10_2
  • 6.12.0-211.54.1.el10_2
  • 6.12.0-211.55.1.el10_2
  • 6.12.0-211.56.1.el10_2
  • 6.12.0-211.58.1.el10_2
  • 6.12.0-211.59.1.el10_2
RHEL 9 Released
32 kernels
  • 5.14.0-687.5.1.el9_8
  • 5.14.0-687.5.3.el9_8
  • 5.14.0-687.10.1.el9_8
  • 5.14.0-687.12.1.el9_8
  • 5.14.0-687.13.1.el9_8
  • 5.14.0-687.15.1.el9_8
  • 5.14.0-687.17.1.el9_8
  • 5.14.0-687.19.1.el9_8
  • 5.14.0-687.20.1.el9_8
  • 5.14.0-687.22.1.el9_8
  • 5.14.0-687.24.1.el9_8
  • 5.14.0-687.23.1.el9_8
  • 5.14.0-687.25.1.el9_8
  • 5.14.0-687.26.1.el9_8
  • 5.14.0-687.29.1.el9_8
  • 5.14.0-687.30.1.el9_8
  • 5.14.0-687.31.1.el9_8
  • 5.14.0-687.33.1.el9_8
  • 5.14.0-687.34.1.el9_8
  • 5.14.0-687.36.1.el9_8
  • 5.14.0-687.38.1.el9_8
  • 5.14.0-687.39.1.el9_8
  • 5.14.0-687.41.1.el9_8
  • 5.14.0-687.42.1.el9_8
  • 5.14.0-687.44.1.el9_8
  • 5.14.0-687.45.1.el9_8
  • 5.14.0-687.46.1.el9_8
  • 5.14.0-687.47.1.el9_8
  • 5.14.0-687.48.1.el9_8
  • 5.14.0-687.49.1.el9_8
  • 5.14.0-687.50.1.el9_8
  • 5.14.0-687.51.1.el9_8
Rocky Linux 10 Released
26 kernels
  • 6.12.0-211.18.1.el10_2
  • 6.12.0-211.22.1.el10_2
  • 6.12.0-211.26.1.el10_2
  • 6.12.0-211.28.1.el10_2
  • 6.12.0-211.32.1.el10_2
  • 6.12.0-211.16.1.el10_2.0.1
  • 6.12.0-211.33.1.el10_2
  • 6.12.0-211.34.1.el10_2
  • 6.12.0-211.37.1.el10_2
  • 6.12.0-211.39.1.el10_2
  • 6.12.0-211.40.1.el10_2
  • 6.12.0-211.42.1.el10_2
  • 6.12.0-211.43.1.el10_2
  • 6.12.0-211.44.1.el10_2
  • 6.12.0-211.46.1.el10_2
  • 6.12.0-211.47.1.el10_2
  • 6.12.0-211.49.1.el10_2
  • 6.12.0-211.50.1.el10_2
  • 6.12.0-211.51.1.el10_2
  • 6.12.0-211.52.1.el10_2
  • 6.12.0-211.53.1.el10_2
  • 6.12.0-211.54.1.el10_2
  • 6.12.0-211.55.1.el10_2
  • 6.12.0-211.56.1.el10_2
  • 6.12.0-211.58.1.el10_2
  • 6.12.0-211.56.1.el10_2.0.1
Rocky Linux 9 Released
26 kernels
  • 5.14.0-687.12.1.el9_8
  • 5.14.0-687.15.1.el9_8
  • 5.14.0-687.17.1.el9_8
  • 5.14.0-687.10.1.el9_8.0.1
  • 5.14.0-687.22.1.el9_8
  • 5.14.0-687.24.1.el9_8
  • 5.14.0-687.25.1.el9_8
  • 5.14.0-687.26.1.el9_8
  • 5.14.0-687.29.1.el9_8
  • 5.14.0-687.30.1.el9_8
  • 5.14.0-687.31.1.el9_8
  • 5.14.0-687.33.1.el9_8
  • 5.14.0-687.34.1.el9_8
  • 5.14.0-687.36.1.el9_8
  • 5.14.0-687.38.1.el9_8
  • 5.14.0-687.39.1.el9_8
  • 5.14.0-687.41.1.el9_8
  • 5.14.0-687.42.1.el9_8
  • 5.14.0-687.44.1.el9_8
  • 5.14.0-687.45.1.el9_8
  • 5.14.0-687.46.1.el9_8
  • 5.14.0-687.47.1.el9_8
  • 5.14.0-687.48.1.el9_8
  • 5.14.0-687.49.1.el9_8
  • 5.14.0-687.50.1.el9_8
  • 5.14.0-687.51.1.el9_8
Ubuntu 26.04 Will Not Fix —