CVE-2026-45853
published 2026-05-27CVE-2026-45853: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()…
PriorityP341high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.16%
6.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()
amdgpu_discovery_get_nps_info() internally allocates memory for ranges
using kvcalloc(), which may use vmalloc() for large allocation. Using
kfree() to release vmalloc memory will lead to a memory corruption.
Use kvfree() to safely handle both kmalloc and vmalloc allocations.
Compile tested only. Issue found using a prototype static analysis tool
and code review.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= b194d21b9bcc15b50df1bc3ff7428e51c2918a6f < 16e7e7ad8cdc6b4c4af7f31e262f1494c1b2a55e | 16e7e7ad8cdc6b4c4af7f31e262f1494c1b2a55e |
| linux | linux | >= b194d21b9bcc15b50df1bc3ff7428e51c2918a6f < 9ae85b0c1909b6c6bfd2636b04cdaf7f520bf2b5 | 9ae85b0c1909b6c6bfd2636b04cdaf7f520bf2b5 |
| linux | linux | >= b194d21b9bcc15b50df1bc3ff7428e51c2918a6f < f441538893eba6347b983f2904819ca6c99da65e | f441538893eba6347b983f2904819ca6c99da65e |
| linux | linux | >= b194d21b9bcc15b50df1bc3ff7428e51c2918a6f < 0c44d61945c4a80775292d96460aa2f22e62f86c | 0c44d61945c4a80775292d96460aa2f22e62f86c |
| linux | linux_kernel | >= 6.11 < 6.12.75 | 6.12.75 |
| linux | linux_kernel | >= 6.13 < 6.18.14 | 6.18.14 |
| linux | linux_kernel | >= 6.19 < 6.19.4 | 6.19.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.12.74/6.18.13/6.19.3 amdgpu_gmc_get_nps_memranges memory corruption (WID-SEC-2026-1700)
vuldb·2026-06-26·CVSS 7.8
CVE-2026-45853 [HIGH] Linux Kernel up to 6.12.74/6.18.13/6.19.3 amdgpu_gmc_get_nps_memranges memory corruption (WID-SEC-2026-1700)
A vulnerability classified as critical has been found in Linux Kernel up to 6.12.74/6.18.13/6.19.3. This affects the function amdgpu_gmc_get_nps_memranges. The manipulation leads to memory corruption.
This vulnerability is documented as CVE-2026-45853. The attack requires being on the local network. There is not any exploit available.
It is recommended to upgrade the affected component.
GHSA
GHSA-f6wq-h8g2-9j9p: In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()
amdgpu
ghsa_unreviewed·2026-05-27
CVE-2026-45853 GHSA-f6wq-h8g2-9j9p: In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()
amdgpu
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()
amdgpu_discovery_get_nps_info() internally allocates memory for ranges
using kvcalloc(), which may use vmalloc() for large allocation. Using
kfree() to release vmalloc memory will lead to a memory corruption.
Use kvfree() to safely handle both kmalloc and vmalloc allocations.
Compile tested only. Issue found using a prototype static analysis tool
and code review.
Red Hat
kernel: drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()
vendor_redhat·2026-05-27
CVE-2026-45853 CWE-763 kernel: drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()
kernel: drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()
A flaw was found in the Linux kernel's `drm/amdgpu` component. The `amdgpu_discovery_get_nps_info()` function incorrectly deallocates memory by using `kfree()` instead of `kvfree()`, even when memory was allocated with `kvcalloc()` which may use `vmalloc()`. This improper memory handling can lead to memory corruption. Such a vulnerability could potentially be exploited by a local attacker to cause system instability or escalate privileges.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat
No detection rules found.
No public exploits indexed.
2026-05-27
Published