EUVD-2026-80411
GHSA-vph6-3qcj-jq9w
Severity by source
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Local GPU access (AV:L, PR:L), timing-dependent race requiring induced SVM migration (AC:H); stale DMA to freed/migrated pages gives full-triad impact but stays within kernel-managed memory (S:U).
Primary rating from Vendor (Linux).
CVSS VectorVendor: Linux
Lifecycle Timeline
6DescriptionCVE.org
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Add TLB flush after MES queue eviction/suspension
MES (Micro Engine Scheduler) does not perform heavy-weight TLB invalidation after unmapping queues, unlike HWS which does this automatically. This causes a race condition where in-flight DMA descriptors can access memory that has been unmapped, leading to page faults and GPU queue hangs during SVM page migration.
The issue manifests as KFDSVMRangeTest.MultiThreadMigrationTest failures on gfx1151 (Strix Point) with XNACK mode 1 enabled - the GPU compute queue hangs with packets submitted but never consumed.
Add kfd_flush_tlb() calls after MES queue removal in two locations:
- evict_process_queues_cpsch(): after all queues removed during eviction
- suspend_queues(): after debug/criu queue suspension (with mem_fence barrier)
This ensures all in-flight memory accesses from unmapped queues are flushed before memory is freed or migrated.
(cherry picked from commit f5c4f88e0f9c45a8fb9dfac0c1df726c95e41b77)
AnalysisAI
Stale GPU TLB entries in the Linux kernel's AMD KFD (amdkfd) driver let in-flight DMA descriptors from already-unmapped MES-scheduled queues continue reading or writing memory that has been freed or migrated, producing page faults and hung compute queues. The flaw affects AMD GPU/APU systems running KFD/ROCm compute through the MES firmware scheduler path rather than the HWS path (which invalidates the TLB automatically), and was reproduced on gfx1151 (Strix Point) with XNACK mode 1 enabled during SVM page-migration workloads such as KFDSVMRangeTest.MultiThreadMigrationTest. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires local access to an affected AMD GPU/APU with KFD/ROCm compute enabled - specifically reproduced on gfx1151 (Strix Point) with XNACK mode 1 (page-fault-based SVM) active. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a local, race-condition-dependent memory-safety bug in the AMD KFD (amdkfd) driver's MES scheduler path, not a remotely exploitable flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patches are available: upgrade to Linux 6.18.51, 7.2.5, 7.3-rc2 or later, which apply the upstream fixes 94e25cb6ab7f4f025bcdcd8ea79fda30f12843a4, 6aae545c87087e4dc96e205452243813bfa73ba2, and e230c546ed93741833ab5babb0b202f9c2052b45 (mainline f5c4f88e0f9c45a8fb9dfac0c1df726c95e41b77) that add kfd_flush_tlb() after MES queue eviction and suspension; distributions that backport DRM/amdkfd fixes should confirm these commit IDs are present. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every Linux host, container image, and VM that runs AMD GPU/APU hardware with ROCm/KFD compute, determine which of them route KFD workloads through the MES firmware scheduler path (rather than the HWS path, which invalidates the TLB automatically), and prioritize shared or multi-tenant GPU compute nodes for remediation. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today