Executive brief
A vulnerability was identified in the Linux kernel's AMD GPU driver that could lead to the system processing invalid memory pages. This component is responsible for managing how the graphics card interacts with system memory. If exploited, it could potentially lead to system instability or unauthorized access to memory data.
Technical details
A vulnerability in the amdgpu driver's HMM (Heterogeneous Memory Management) implementation was discovered where the mmu_interval_notifier sequence was being read multiple times within a loop in amdgpu_hmm_range_get_pages. This creates a race condition where the notifier sequence could change between reads, leading the kernel to work with invalid or stale memory pages. The fix ensures the notifier sequence is read only once at the beginning of the operation. The issue affects systems using AMD GPUs and was resolved in kernel versions 7.0.12 and 7.1.
Affected products
- Linux Linux Kernel versions before 7.0.12, 7.1
Timeline
- 2026-02-18: other: Initial patch authored
- 2026-07-19: disclosed: CVE published
- 2026-07-19: advisory