Buffer Allocation Vulnerability in Linux Kernel Affects AMD Products

CVE-2026-98905

What is CVE-2026-98905?

A vulnerability in the Linux kernel related to AMDKFD arises from improper handling of queue buffers in CRIU restore processes. Specifically, the function set_queue_properties_from_criu() fails to populate necessary buffer fields in queue_properties, leading to potential null pointer dereferences in subsequent processes. This oversight can compromise system stability and security. The issue has been addressed by ensuring the correct call to kfd_queue_acquire_buffers() and proper type casting in set_queue_properties_from_criu(). Users are advised to update to the latest kernel version to mitigate risks.

References