Linux Kernel: amdkfd DRM Queue Buffer Acquire Bug in CRIU Restore
CVE-2026-98905 Published on October 23, 2026
drm/amdkfd: Properly acquire queue buffers in CRIU restore
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Properly acquire queue buffers in CRIU restore
When kfd_queue_acquire_buffers() was split off from
set_queue_properties_from_user(), set_queue_properties_from_criu()
was missed. Thus, set_queue_properties_from_criu() is not
filling out the buffer fields of queue_properties, which
can come up when subsequent code expects them to be non-null.
Add the proper call to kfd_queue_acquire_buffers(), and also
use the right cast types in set_queue_properties_from_criu()
(which were missed at the same time)
(cherry picked from commit 88ed96abbbe27b70193544fbc1ee06448c274714)
Products Associated with CVE-2026-98905
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version fb91065851cd5f2735348c5f3eddeeca3d7c2973 and below e2dbdd14c3352483a89e4a9afda05d0f3fcc2c83 is affected.
- Version fb91065851cd5f2735348c5f3eddeeca3d7c2973 and below c6c290e408fe328e091f0bf7502a42b0deea82e9 is affected.
- Version fb91065851cd5f2735348c5f3eddeeca3d7c2973 and below 20a5e7ffdfecddc34c60a6b4483f42acf3d8731d is affected.
- Version 6.12 is affected.
- Before 6.12 is unaffected.
- Version 6.12.111, <= 6.12.* is unaffected.
- Version 6.18.53, <= 6.18.* is unaffected.
- Version 7.2, <= * is unaffected.