CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Check bounds on CRIU restore queue type and mqd size
We weren't checking whether the values provided in the private data in kfd CRIU restore were within bounds.
For queue type, add a KFDQUEUETYPEMAX and ensure the provided type is less than it.
For mqdsize, add new function mqdsizefromqueuetype and confirm that the provided mqdsize matches expectations.
(cherry picked from commit f19d8086f6644083c913d70bfdeee20e1b6f46a5)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68258?
CVE-2026-68258 has a risk score of 38, indicating a moderate severity level.
How do I fix CVE-2026-68258?
To fix CVE-2026-68258, ensure that your Linux kernel is updated to a version that includes the fix for this vulnerability.
What systems are affected by CVE-2026-68258?
CVE-2026-68258 affects the Linux kernel implementations incorporating the drm/amdkfd component.
What is the description of CVE-2026-68258?
CVE-2026-68258 addresses an issue where the Linux kernel did not properly check the bounds on CRIU restore queue type and mqd size.
When was CVE-2026-68258 published?
CVE-2026-68258 was published on August 10, 2026.