CVE-2021-4460
published 2025-10-01CVE-2021-4460: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If get_num_sdma_queues or…
PriorityP427high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.15%
4.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
If get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up
doing a shift operation where the number of bits shifted equals
number of bits in the operand. This behaviour is undefined.
Set num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the
count is >= number of bits in the operand.
Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.38-1 (bookworm) | linux 5.10.38-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 4a488a7ad71401169cecee75dc94bcce642e2c53 < 0c0356ef2498c1a250fe3846f30293f828737309 | 0c0356ef2498c1a250fe3846f30293f828737309 |
| linux | linux | >= 4a488a7ad71401169cecee75dc94bcce642e2c53 < 1874b0ef1426b873de94c61861e38f29a8df714c | 1874b0ef1426b873de94c61861e38f29a8df714c |
| linux | linux | >= 4a488a7ad71401169cecee75dc94bcce642e2c53 < 3fdc5182700910a685d23df57d65166e8556a266 | 3fdc5182700910a685d23df57d65166e8556a266 |
| linux | linux | >= 4a488a7ad71401169cecee75dc94bcce642e2c53 < 9069b1b542de8f3bbffef868aff41521b21485cf | 9069b1b542de8f3bbffef868aff41521b21485cf |
| linux | linux | >= 4a488a7ad71401169cecee75dc94bcce642e2c53 < 50e2fc36e72d4ad672032ebf646cecb48656efe0 | 50e2fc36e72d4ad672032ebf646cecb48656efe0 |
| linux | linux_kernel | < 5.4.118 | 5.4.118 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 5.11 < 5.11.20 | 5.11.20 |
| linux | linux_kernel | >= 5.12 < 5.12.3 | 5.12.3 |
| linux | linux_kernel | >= 5.5 < 5.10.36 | 5.10.36 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2021-4460: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If get_num_sdma_queues or get_nu
osv·2025-10-01·CVSS 7.1
CVE-2021-4460 [HIGH] CVE-2021-4460: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If get_num_sdma_queues or get_nu
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up doing a shift operation where the number of bits shifted equals number of bits in the operand. This behaviour is undefined. Set num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the count is >= number of bits in the operand. Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472
GHSA
GHSA-qxqc-pxc7-f648: In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
If get_num_sdma_queues or get_
ghsa_unreviewed·2025-10-01
CVE-2021-4460 [HIGH] CWE-125 GHSA-qxqc-pxc7-f648: In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
If get_num_sdma_queues or get_
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
If get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up
doing a shift operation where the number of bits shifted equals
number of bits in the operand. This behaviour is undefined.
Set num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the
count is >= number of bits in the operand.
Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472
Red Hat
kernel: Linux kernel: integer overflow and information disclosure via undefined shift operation in drm/amdkfd
vendor_redhat·2025-10-01·CVSS 7.1
CVE-2021-4460 [HIGH] CWE-1335 kernel: Linux kernel: integer overflow and information disclosure via undefined shift operation in drm/amdkfd
kernel: Linux kernel: integer overflow and information disclosure via undefined shift operation in drm/amdkfd
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
If get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up
doing a shift operation where the number of bits shifted equals
number of bits in the operand. This behaviour is undefined.
Set num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the
count is >= number of bits in the operand.
Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472
A flaw was found in the Linux kernel’s AMD Kernel Fusion Driver (amdkfd) within the drm subsystem. When either get_num_sdma_queues() or get_num_xgmi_sdma_queues() returned 0, the driver performed a bit shift wher
Debian
CVE-2021-4460: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd:...
vendor_debian·2021·CVSS 7.1
CVE-2021-4460 [HIGH] CVE-2021-4460: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd:...
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up doing a shift operation where the number of bits shifted equals number of bits in the operand. This behaviour is undefined. Set num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the count is >= number of bits in the operand. Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472
Scope: local
bookworm: resolved (fixed in 5.10.38-1)
bullseye: resolved (fixed in 5.10.38-1)
forky: resolved (fixed in 5.10.38-1)
sid: resolved (fixed in 5.10.38-1)
trixie: resolved (fixed in 5.10.38-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0c0356ef2498c1a250fe3846f30293f828737309https://git.kernel.org/stable/c/1874b0ef1426b873de94c61861e38f29a8df714chttps://git.kernel.org/stable/c/3fdc5182700910a685d23df57d65166e8556a266https://git.kernel.org/stable/c/50e2fc36e72d4ad672032ebf646cecb48656efe0https://git.kernel.org/stable/c/9069b1b542de8f3bbffef868aff41521b21485cf
2025-10-01
Published