AZL-97752
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-97752.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-97752
- Upstream
- Published
- 2026-08-26T15:17:08Z
- Modified
- 2026-08-29T05:27:27Z
- Summary
- CVE-2026-80541 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: validate GEM_CREATE domain combinations
AMDGPUGEMCREATE checked domain bits against AMDGPUGEMDOMAINMASK, but did not validate domain combinations. Userspace could combine CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA, making amdgpuboplacementfromdomain() exceed AMDGPUBOMAXPLACEMENTS and hit BUG_ON().
Allow combinations only within CPU/GTT/VRAM, and require non-CPU/GTT/ VRAM domains to be specified one at a time. Return -EINVAL for invalid combinations in amdgpugemcreate_ioctl().
v2: Rename helper from amdgpugemdomainvalid() to amdgpugemaredomains_valid() (Christian)
(cherry picked from commit db39852d0c39843cb02048dfb47e4b8c703e9080)
- References