AZL-89024
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89024.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-89024
- Upstream
- Published
- 2026-05-28T10:16:38Z
- Modified
- 2026-08-28T17:46:35.792928098Z
- Summary
- CVE-2026-46229 affecting package kernel for versions less than 6.6.141.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
KFD VRAM allocations set AMDGPUGEMCREATEVRAMWIPEONRELEASE but not AMDGPUGEMCREATEVRAMCLEARED, leaving freshly allocated VRAM with stale data from prior use observable by compute kernels.
The GEM ioctl path already sets VRAMCLEARED for all userspace allocations via amdgpugemcreateioctl() and amdgpumodedumb_create(). The KFD path was missing this flag, allowing stale page table remnants to leak into user buffers.
This causes crashes in RCCL P2P transport where non-zero data in ptrExchange/head/tail fields corrupts the protocol handshake.
- References