In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/gfx: fix cleaner shader IB buffer overflow
The cleaner shader sysfs path allocates a 16-dword (64 byte) IB but incorrectly fills (align_mask + 1) dwords. On GFX rings align_mask is 0xff, so the loop wrote 256 dwords into a 64-byte buffer, causing a kernel page fault.
The IB only needs to be a minimal NOP shell to schedule the job; the cleaner shader itself is emitted on the ring via emit_cleaner_shader(). Fill 16 dwords to match the allocation.
v2: Use ib_size_dw variable (Lijo)
(cherry picked from commit bf21af331ebf72d0935fd70c73192414a422c03a)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 26, 2026 | Aug 26, 2026 |
| Redhat_linux | — | No solution exists | Aug 17, 2026 | Aug 10, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-26.04aUpgrade linux-image-oracle-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-1015-oemUpgrade linux-image-gke-7.0Upgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-genericUpgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-aws-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-azure-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1017-azureUpgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-azureUpgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-realtime-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-7.0.0-1014-awsUpgrade linux-image-gcp-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-ibmUpgrade linux-image-oem-26.04Upgrade linux-image-gke-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-awsUpgrade linux-image-generic-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-7.0Upgrade linux-image-oracleUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-aws-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-38-genericUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-realtime-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-gke | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Aug 10, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub