Executive brief
A vulnerability in the Linux kernel's AMD graphics driver could allow a local user to cause a system hang or crash. The issue occurs when the system fails to properly release a memory lock during a graphics queue update error. This can lead to a denial-of-service condition, impacting the availability of the system for other users and applications.
Technical details
A resource management flaw exists in the 'amdkfd' (AMD Kernel Fusion Driver) component of the Linux kernel's Direct Rendering Manager (DRM) subsystem. Specifically, in the 'pqm_update_queue_properties' function within 'kfd_process_queue_manager.c', an error handling path fails to call 'amdgpu_bo_unreserve' if a queue update fails due to a mapping error. This results in a buffer object remaining reserved indefinitely. A local attacker with low privileges can trigger this condition to cause a kernel deadlock or NULL pointer dereference, leading to a denial of service. Patches have been released for various stable kernel branches including 6.12.y, 6.18.y, and 6.19.y.
Affected products
- Linux Linux Kernel 6.12.x up to 6.12.78, 6.13.x up to 6.18.19, 6.19.x up to 6.19.9, 7.0-rc1 through 7.0-rc3
Timeline
- 2026-05-08: disclosed
- 2026-05-08: advisory
- 2026-03-11: patched: Initial patch committed to maintainer tree