Linux Kernel Vulnerability in AMD Graphics Driver Page Insertion Process

CVE-2026-74721

What is CVE-2026-74721?

A vulnerability exists in the Linux kernel's AMD graphics driver, specifically in the page insertion process of the amdxdna_insert_pages() function. Two incorrect error handling paths result in premature closure of the virtual memory area (VMA) before completing the mmap syscall. This flaw causes the reference count to drop improperly, risking resource leakage and underflow issues when the memory is unmapped. The error is addressed by implementing a deferred-fault approach, ensuring that the VMA remains active throughout the process and retries page insertion through the HMM range-fault mechanism.

References