Memory Leak Vulnerability in Linux Kernel Affecting AMD Graphics Drivers

CVE-2026-68447

What is CVE-2026-68447?

A vulnerability in the Linux kernel's DRM subsystem related to AMD graphics drivers allows an exploitation that can lead to unintended memory disclosure. Specifically, during the CRIU checkpoint process, the mechanism responsible for copying the control stack fails to properly limit the memory size it accesses. This oversight can result in reading past allocated memory bounds, leading to sensitive kernel data being leaked into userspace. To mitigate this risk, recent updates have implemented better bounding for the control stack size, ensuring that memory reads during checkpointing do not exceed allocated resources and safeguarding user data against potential exposure.

References