CVE-2026-53376
Description
A flaw was found in the AMD Kernel Fusion Driver (AMDKFD) in the Linux kernel. This vulnerability exists in the kfd_ioctl_get_process_apertures_new function, where a missing upper bound check for the num_of_nodes argument could allow a local attacker to provide an excessively large value. This could lead to an out-of-bounds read or write, potentially resulting in information disclosure or a denial of service to the system.
Statement
This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local unprivileged access to the AMD compute interface and affects only environments equipped with supported AMD GPU hardware. On systems running AMD graphics processing units, an authenticated user capable of issuing ioctls against the driver can trigger memory corruption through unbounded parameters, leading to a system crash or information leakage. Systems without AMD accelerators or environments where device nodes for GPU compute are restricted to privileged accounts remain unaffected.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | 5.5 | N/A |
| Attack Vector | Local | Local | N/A |
| Attack Complexity | Low | Low | N/A |
| Privileges Required | Low | Low | N/A |
| User Interaction | None | None | N/A |
| Scope | Unchanged | Unchanged | N/A |
| Confidentiality | None | None | N/A |
| Integrity Impact | None | None | N/A |
| Availability Impact | High | High | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
