In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: check num_entries in GEM_OP GET_MAPPING_INFO
kvcalloc(args->num_entries, sizeof(*vm_entries), GFP_KERNEL) at amdgpu_gem.c:1050 uses the user-supplied num_entries directly without any upper bounds check. Since num_entries is a __u32 and sizeof(drm_amdgpu_gem_vm_entry) is 32 bytes, a large num_entries produces an allocation exceeding INT_MAX, triggering WARNING in __kvmalloc_node_noprof(), causing a kernel WARNING, TAINT_WARN, and panic on CONFIG_PANIC_ON_WARN=y systems.
Add a size bounds check before we invoke the kvzalloc() to reject oversized num_entries early with -EINVAL.
(cherry picked from commit 1fe7bf5457f6efd7be60b17e23163ba54341d73d)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Aug 4, 2026 | Jul 19, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-azureUpgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-ibm-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-aws-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1015-raspi | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub