Input Validation Flaw in Linux Kernel Affects KFD CRIU Restore Process

CVE-2026-80870

What is CVE-2026-80870?

A vulnerability exists within the Linux kernel related to inadequate validation of user-supplied object IDs during the KFD CRIU restore process. Specifically, when restoring event notifications and buffer objects, the system may allocate memory based on restored IDs, which can potentially exceed signed integer limits. If the restored ID surpasses INT_MAX, it could trigger a warning in the IDR layer, which is undesirable as it may lead to kernel warnings or even shutdowns in systems configured with panic_on_warn. This issue has been addressed by adding validation steps to ensure restored IDs remain within valid ranges, thus preventing potential disruptions while maintaining functionality for valid data.

References