CVE-2026-53143: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11

Published Jun 25, 2026
·
Updated

drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11

Affected Software

12 affected componentsFixes available
Linux Linux kernel (drm/amdkfd)
Microsoft azl3 kernel 6.6.141.1-1<6.6.143.1-1
6.6.143.1-1
Linux Linux kernel>=5.19<6.6.143
Linux Linux kernel>=6.7<6.12.94
Linux Linux kernel>=6.13<6.18.36
Linux Linux kernel>=6.19<7.0.13
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Linux Linux kernel=7.1-rc4
Linux Linux kernel=7.1-rc5
Linux Linux kernel=7.1-rc6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 6.6.143.1-1
  2. Upgrade

    Upgrade Linux kernel drm/amdkfd (Fix buffer overflow in SDMA queue checkpoint/restore on GFX11) to a version that resolves this vulnerability.

    Fixed in v11
  3. Configuration

    In the Linux kernel kfd MQD manager code for v11, ensure the SDMA-specific checkpoint_mqd_sdma() and restore_mqd_sdma() functions use sizeof(struct v11_compute_mqd) (2048 bytes) rather than sizeof(struct v11_sdma_mqd) (512 bytes) to prevent corrupting/leaking 1536 bytes of adjacent GTT memory during CRIU checkpoint/restore of SDMA queues on Navi3x.

    drm/amdkfd (KFD_MQD_TYPE_SDMA checkpoint/restore) mqd buffer size selection = Use sizeof(struct v11_compute_mqd) (2048 bytes) instead of sizeof(struct v11_sdma_mqd) (512 bytes) for v11 SDMA MQD checkpoint_mqd/restore_mqd handling

Event History

Jun 25, 2026
CVE Published
via MITRE·08:38 AM
Data Sourced
via MITRE·08:38 AM
Description
Data Sourced
via NVD·09:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via Red Hat·10:02 AM
DescriptionSeverityAffected Software
Jun 27, 2026
Data Sourced
via Microsoft·08:10 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:10 AM
Affected Software
Updated
via Microsoft·08:10 AM
DescriptionSeverity

Frequently Asked Questions

1

What is the severity of CVE-2026-53143?

CVE-2026-53143 has a high severity rating of 7.8.

2

How do I fix CVE-2026-53143?

To fix CVE-2026-53143, update the Linux kernel to the latest version that contains the patch for this vulnerability.

3

What type of vulnerability is CVE-2026-53143?

CVE-2026-53143 is a buffer overflow vulnerability found in the DRM component of the Linux kernel.

4

Which software is affected by CVE-2026-53143?

CVE-2026-53143 affects the Linux kernel, specifically the drm/amdkfd module.

5

What impact does CVE-2026-53143 have on systems?

CVE-2026-53143 can potentially allow attackers to alter memory, leading to system crashes or unauthorized access.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203