In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Check bounds in allocateeventnotification_slot
The valid event ids go from 0 to KFDSIGNALEVENT_LIMIT
allocateeventnotification_slot has an option to specify an event id to allocate at, used by CRIU. We weren't checking the bounds on that value.
Check them.
v2: Lower bounds check is unecessary because of idralloc already rejecting negative numbers. Upper bounds check should be KFDSIGNALEVENTLIMIT since the signal mode mappings might not yet exist
(cherry picked from commit 6853f1f6cbbeb3f53ebbbd7286536aeb2c5d5f50)
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68259.json",
"cna_assigner": "Linux"
}