Executive brief
A memory management issue was identified in the Linux kernel's AMD GPU driver. The driver incorrectly used a standard memory release function for memory that might have been allocated using a specialized large-buffer method. In practice, this could lead to memory corruption, potentially causing system instability or crashes on systems using AMD graphics hardware.
Technical details
A vulnerability was discovered in the amdgpu driver within the Linux kernel, specifically in the amdgpu_gmc_get_nps_memranges() function. The function amdgpu_discovery_get_nps_info() allocates memory using kvcalloc(), which can utilize either kmalloc() or vmalloc() depending on the allocation size. The driver previously attempted to release this memory using kfree(), which is incompatible with vmalloc-allocated memory and leads to memory corruption. An attacker could potentially leverage this to cause a denial of service or system instability. The issue has been resolved by replacing kfree() with kvfree(), which correctly handles both allocation types.
Affected products
- Linux Linux Kernel n/a
Timeline
- 2026-01-29: other: Patch authored
- 2026-05-27: disclosed: CVE published
- 2026-05-27: advisory: NVD advisory published