In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: fix QID bit leak in pqmcreatequeue()
When MES is enabled and amdgpuamdkfdallockernelmem() fails during the first queue creation for a process, pqmcreatequeue() returns early via 'return retval' without going through the errcreatequeue cleanup label.
This means clearbit(*qid, pqm->queueslotbitmap) is never called, leaving the reserved QID bit permanently set in queueslot_bitmap. Over time this leaks QID slots, potentially exhausting all available queue slots.
Fix this by replacing 'return retval' with 'goto errallocatepqn' so that clear_bit() is always called on the error path without touching the uninitialized pqn pointer.
AILIKFD-813
(cherry picked from commit a107f74c38edbb80d6ab64dcaeeb292c14e9779f)
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74448.json"
}