CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages
drm/amdgpu: fix amdgpuhmmrangegetpages
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch c08972f555945cda57b0adb72272a37910153390
Event History
Frequently Asked Questions
What systems are exposed to this issue?
Systems running the Linux kernel with the AMDGPU DRM driver are the relevant population. The issue is also listed for Debian's linux package.
What level of access does an attacker need?
The supplied severity vector indicates local attack access, low attack complexity, low privileges required, and no user interaction. It also rates confidentiality, integrity, and availability impacts as high.
What is the underlying failure condition?
This is a race condition in amdgpu_hmm_range_get_pages. Reading the notifier sequence more than once can result in operating on invalid pages.
What fix should be applied?
Apply a kernel update containing the resolved AMDGPU change that reads the notifier sequence only once. The provided references include stable kernel commits for the fix.