CVE-2026-63882

drm/amdkfd: fix NULL pointer bug in svm_range_set_attr

N/A
Published: July 19, 2026 at 02:54 PM UTC
Updated: July 27, 2026 at 05:57 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix NULL pointer bug in svm_range_set_attr The process_info could be NULL if user doesn't call kfd_ioctl_acquire_vm before calling kfd_ioctl_svm. (cherry picked from commit 83a26c812e0529eb040d31a76f73e33e637243d4)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.14 ≤ v < 6.1.1765.14 ≤ v < 6.12.935.14 ≤ v < 6.18.355.14 ≤ v < 6.6.1435.14 ≤ v < 7.0.125.14 ≤ v < 7.142de677f79999791bee4e21be318c32d90ab62c65.14
Vendor states this is fixed in 2f9c3c161692f5bf1436e869a651bed10936e071 (fixed)
Vendor states this is fixed in 6495cc09f7e6c2af571b3e2e4640283b3792ebf2 (fixed)
Vendor states this is fixed in c24eee21f9a943374fd64260a6e17dc3984e3d0e (fixed)
Vendor states this is fixed in d4e73a047d4ea866b75ee4b879d0d787dfa2704c (fixed)
Vendor states this is fixed in e4dcb5d6360319609bc5b05fb40e98b0af6bc674 (fixed)
Vendor states this is fixed in e984d61d92e702096058f0f828f4b2b8563b88ce (fixed)
Vendor states this is fixed in 5.14 (unaffected)
Vendor states this is fixed in 6.1.176 (unaffected)
Vendor states this is fixed in 6.12.93 (unaffected)
Vendor states this is fixed in 6.18.35 (unaffected)
Vendor states this is fixed in 6.6.143 (unaffected)
Vendor states this is fixed in 7.0.12 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusAWAITING ANALYSIS

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card