Not yet scoredPublished Sep 24, 2026

CVE-2026-97495drm/amdkfd: Check bounds on allocate_doorbell

Updated under an hour ago (Oct 26, 2026, 1:23 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on allocate_doorbell allocated_doorbell has an option to set the doorbell id to a specific value (used by CRIU). This value was not bounds checked. Check to confirm it's less than KFD_MAX_NUM_OF_QUEUES_PER_PROCESS.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 3, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5bb6a8fa75fcfda93592bee0a4910420ceab15f3 before 7e06636260a2d95e3fa181bc337d0eeb812b7a41; 5bb6a8fa75fcfda93592bee0a4910420ceab15f3 builds before 3d2ddfc9b361b0d38c3ff4804ce42503e4bc97de; from 5bb6a8fa75fcfda93592bee0a4910420ceab15f3 before e0cecd04a4fc4c75e375b91cf53eab5ba2e4ab7f; from 5bb6a8fa75fcfda93592bee0a4910420ceab15f3 before c2c89118c27cbd3adace62c5df19d15b0e96ade1; 5bb6a8fa75fcfda93592bee0a4910420ceab15f3 builds before 1f087bb8cf9e8797633da35c85435e557ef74d06	CNA record

References

References

https://git.kernel.org/stable/c/7e06636260a2d95e3fa181bc337d0eeb812b7a41
https://git.kernel.org/stable/c/3d2ddfc9b361b0d38c3ff4804ce42503e4bc97de
https://git.kernel.org/stable/c/e0cecd04a4fc4c75e375b91cf53eab5ba2e4ab7f
https://git.kernel.org/stable/c/c2c89118c27cbd3adace62c5df19d15b0e96ade1
https://git.kernel.org/stable/c/1f087bb8cf9e8797633da35c85435e557ef74d06

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.