Linux Kernel Vulnerability Affecting AMD GPU Command Submission

CVE-2026-80576

What is CVE-2026-80576?

A vulnerability exists in the Linux kernel affecting AMD GPUs where oversized instruction buffers (IBs) can be submitted without appropriate limits. This flaw allows user-supplied buffer lengths to exceed safe thresholds, potentially corrupting adjacent control bits and destabilizing the command submission process. To address this, a new per-ring packet size limit has been implemented, which rejects command submissions that exceed specified limits. This enhancement ensures better stability and security during operations with GFX, compute, SDMA, and VPE ring types.

References