CVE-2026-74448: drm/amdkfd: fix QID bit leak in pqm_create_queue()
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: fix QID bit leak in pqmcreatequeue()
When MES is enabled and amdgpuamdkfdallockernelmem() fails during the first queue creation for a process, pqmcreatequeue() returns early via 'return retval' without going through the errcreatequeue cleanup label.
This means clearbit(qid, pqm->queueslotbitmap) is never called, leaving the reserved QID bit permanently set in queueslotbitmap. Over time this leaks QID slots, potentially exhausting all available queue slots.
Fix this by replacing 'return retval' with 'goto errallocatepqn' so that clearbit() is always called on the error path without touching the uninitialized pqn pointer.
AILIKFD-813
(cherry picked from commit a107f74c38edbb80d6ab64dcaeeb292c14e9779f)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74448?
CVE-2026-74448 has a risk rating of 23.
What does CVE-2026-74448 involve?
CVE-2026-74448 involves a QID bit leak in pqm_create_queue() in the Linux kernel when MES is enabled.
How do I fix CVE-2026-74448?
To fix CVE-2026-74448, ensure that the Linux kernel is updated to a version that includes the patch addressing this vulnerability.
Which component is affected by CVE-2026-74448?
CVE-2026-74448 affects the DRM and AMDKFD components of the Linux kernel.
When was CVE-2026-74448 published?
CVE-2026-74448 was published on August 15, 2026.