SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63882

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A NULL pointer dereference vulnerability exists in the Linux kernel's AMD Kernel Fusion Driver (amdkfd), specifically when the `kfd_ioctl_svm` function is called without prior invocation of `kfd_ioctl_acquire_vm`. This flaw could lead to application crashes or undefined behavior, potentially impacting systems relying on AMD GPU virtualization features. Linux distributions utilizing the affected kernel versions should prioritize applying the fix to mitigate risks associated with this vulnerability.

CVE
CVE-2026-63882
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix NULL pointer bug in svm_range_set_attr The process_info could be NULL if user doesn't call kfd_ioctl_acquire_vm before calling kfd_ioctl_svm. (cherry picked from commit 83a26c812e0529eb040d31a76f73e33e637243d4)