CVE-2026-74446: drm/amdkfd: hold event_mutex while checkpointing CRIU events
drm/amdkfd: hold eventmutex while checkpointing CRIU events
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.152.1-1 - Configuration
Update the drm/amdkfd CRIU checkpoint implementation so kfd_criu_checkpoint_events() holds p->event_mutex across both (1) the count of entries in p->event_idr (via kfd_get_num_events()) and (2) the subsequent walk that fills the event array. This prevents concurrent event insert/remove from making the walk observe a different set than the counted size, which otherwise can lead to iterating more entries than counted and writing past the end.
Linux kernel (drm/amdkfd) Locking order and coverage for CRIU event checkpointing = Hold p->event_mutex across both kfd_get_num_events() count and the kfd_criu_checkpoint_events() IDR walk/counting loop (ensure p->event_mutex is held from count through walk).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74446?
CVE-2026-74446 has a risk rating of 50.
How do I fix CVE-2026-74446?
To fix CVE-2026-74446, update the Linux kernel to the latest patched version.
What are the potential consequences of CVE-2026-74446?
CVE-2026-74446 could lead to improper handling of KFD CRIU events, potentially causing system instability.
Which systems are affected by CVE-2026-74446?
CVE-2026-74446 affects the Linux kernel, particularly systems using the amdkfd component.
When was CVE-2026-74446 published?
CVE-2026-74446 was published on August 15, 2026.