CVE-2026-43206
MediumSummary
A vulnerability has been identified in the Linux kernel within the kfd_event_page_set() function, which allows for out-of-bounds writes. This function writes data without checking the buffer size, potentially enabling unauthorized access by unprivileged users.
Risk Assessment
This vulnerability could be exploited by unauthorized users to conduct attacks, potentially compromising system integrity and gaining access to sensitive data.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been fixed to minimize the risk of unauthorized access.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() The kfd_event_page_set() function writes KFD_SIGNAL_EVENT_LIMIT * 8 bytes via memset without checking the buffer size parameter. This allows unprivileged userspace to tri