CVE-2026-97495

Source
https://cve.org/CVERecord?id=CVE-2026-97495
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97495.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97495
Downstream
Published
2026-09-24T16:04:42Z
Modified
2026-10-05T02:30:15Z
Summary
drm/amdkfd: Check bounds on allocate_doorbell
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Check bounds on allocate_doorbell

allocated_doorbell has an option to set the doorbell id to a specific value (used by CRIU). This value was not bounds checked.

Check to confirm it's less than KFD_MAX_NUM_OF_QUEUES_PER_PROCESS.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97495.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5bb6a8fa75fcfda93592bee0a4910420ceab15f3
Fixed
7e06636260a2d95e3fa181bc337d0eeb812b7a41
Fixed
3d2ddfc9b361b0d38c3ff4804ce42503e4bc97de
Fixed
e0cecd04a4fc4c75e375b91cf53eab5ba2e4ab7f
Fixed
c2c89118c27cbd3adace62c5df19d15b0e96ade1
Fixed
1f087bb8cf9e8797633da35c85435e557ef74d06

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97495.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97495.json"