Linux Kernel EUVD-2026-45536

Vendor-released patch: upgrade to a fixed stable kernel - 6.6.141, 6.12.91, 6.18.33, 7.0.10, or 7.1, or later within each series - or apply the corresponding stable commits from git.kernel.org (e.g. c12a5d35033c0640c57c10d7111c010c7b9c2c8e). Rebuild and reboot into the patched kernel; on distributions, install the vendor's updated kernel package. Where immediate patching is not possible, compensating controls include restricting access to the DRM render/card device nodes (/dev/dri/renderD* and /dev/dri/card*) to trusted users or the video/render groups to reduce the local attack surface, and avoiding running untrusted local code or untrusted containers with GPU passthrough on affected AMD VCN 4.0.3 hosts - the trade-off is that this can break legitimate hardware video encode/decode for restricted users and GPU-accelerated workloads. Reference the fix commits and advisory at https://nvd.nist.gov/vuln/detail/CVE-2026-63852.