Not yet scoredPublished Jul 19, 2026

CVE-2026-63882drm/amdkfd: fix NULL pointer bug in svm_range_set_attr

Updated under an hour ago (Oct 28, 2026, 6:23 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix NULL pointer bug in svm_range_set_attr The process_info could be NULL if user doesn't call kfd_ioctl_acquire_vm before calling kfd_ioctl_svm. (cherry picked from commit 83a26c812e0529eb040d31a76f73e33e637243d4)

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Awaiting Analysis
Record last updated: Jul 20, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 42de677f79999791bee4e21be318c32d90ab62c6 before e4dcb5d6360319609bc5b05fb40e98b0af6bc674; from 42de677f79999791bee4e21be318c32d90ab62c6 before 6495cc09f7e6c2af571b3e2e4640283b3792ebf2; from 42de677f79999791bee4e21be318c32d90ab62c6 before d4e73a047d4ea866b75ee4b879d0d787dfa2704c; 42de677f79999791bee4e21be318c32d90ab62c6 builds before 2f9c3c161692f5bf1436e869a651bed10936e071; from 42de677f79999791bee4e21be318c32d90ab62c6 before c24eee21f9a943374fd64260a6e17dc3984e3d0e; from 42de677f79999791bee4e21be318c32d90ab62c6 before e984d61d92e702096058f0f828f4b2b8563b88ce	CNA record

References

References

https://git.kernel.org/stable/c/e4dcb5d6360319609bc5b05fb40e98b0af6bc674
https://git.kernel.org/stable/c/6495cc09f7e6c2af571b3e2e4640283b3792ebf2
https://git.kernel.org/stable/c/d4e73a047d4ea866b75ee4b879d0d787dfa2704c
https://git.kernel.org/stable/c/2f9c3c161692f5bf1436e869a651bed10936e071
https://git.kernel.org/stable/c/c24eee21f9a943374fd64260a6e17dc3984e3d0e
https://git.kernel.org/stable/c/e984d61d92e702096058f0f828f4b2b8563b88ce

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.