CVE-2026-63879

Source
https://cve.org/CVERecord?id=CVE-2026-63879
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63879.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-63879
Downstream
ALSA (4)
AZL (1)
BELL (1)
DEBIAN (1)
openSUSE (1)
RHSA (4)
RLSA (4)
ROOT (2)
SUSE (11)
UBUNTU (1)
Related
Published
2026-07-19T14:54:51Z
Modified
2026-10-28T02:31:00Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
drm/amdgpu: fix amdgpu_hmm_range_get_pages
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix amdgpu_hmm_range_get_pages

The notifier sequence must only be read once or otherwise we could work with invalid pages.

While at it also fix the coding style, e.g. drop the pre-initialized return value and use the common define for 2G range.

(cherry picked from commit c08972f555945cda57b0adb72272a37910153390)

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63879.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c1420a5dd4dd2a1ffc86965ad1c6f439afb130bc
Fixed
e35cf322897dd4921248d11311a89c865b534c14
Fixed
93a9f121de6383f20290840d025ee28fda5f53b5
Fixed
fa34d3e14cb763b50702e8a0f7d4cfd877a73ab9
Fixed
2fd24407457a6b181ba827705678da70e528dcd0
Fixed
962d684b5dc0741dcd93485d41b450de402d5592

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63879.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.12

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63879.json"