CVE-2026-80541

Katalog CVE

CVSS 7.8 · High EPSS 0,13%

Skor CVSS 3.1 7.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEM_CREATE domain combinations AMDGPU_GEM_CREATE checked domain bits against AMDGPU_GEM_DOMAIN_MASK, but did not validate domain combinations. Userspace could combine CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA, making amdgpu_bo_placement_from_domain() exceed AMDGPU_BO_MAX_PLACEMENTS and hit BUG_ON(). Allow combinations only within CPU/GTT/VRAM, and require non-CPU/GTT/ VRAM domains to be specified one at a time. Return -EINVAL for invalid combinations in amdgpu_gem_create_ioctl(). v2: Rename helper from amdgpu_gem_domain_valid() to amdgpu_gem_are_domains_valid() (Christian) (cherry picked from commit db39852d0c39843cb02048dfb47e4b8c703e9080)

Rincian

Terbit di NVD

26 Agustus 2026

Terakhir diubah

27 Agustus 2026

Status NVD

Received

CVSS 3.1

7.8 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,2% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/220aa2589d7321fb68d2e8597862711b5f22ae0b
• https://git.kernel.org/stable/c/493355096e397f9217b41c8574ed2784c7351443
• https://git.kernel.org/stable/c/584e3d47736fe2e7184ef3fc16b00b41485f96c6
• https://git.kernel.org/stable/c/5c73485af7ad9c3ae592db3481f370bc07705391
• https://git.kernel.org/stable/c/5e9d136ad74df4edec67e502ce267597064d8f86
• https://git.kernel.org/stable/c/66133fc05c3af002f45de8a71b833c026ccbfba6
• https://git.kernel.org/stable/c/80f0b53860d02577709d69a312a29ca674b9297c
• https://git.kernel.org/stable/c/ce5da474c3ddf7cccec5dce6aa4296297dd7caff