CVE-2026-45853
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
A vulnerability has been identified in the Linux kernel in the amdgpu_gmc_get_nps_memranges() function, which uses kfree() to free memory allocated by vmalloc(). This may lead to memory corruption.
Risk Assessment
Exploitation of this vulnerability could lead to severe system stability issues and potential data leakage.
Recommendation
It is recommended to update the Linux kernel to a version where kvfree() is used instead of kfree() in the relevant functions.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges() amdgpu_discovery_get_nps_info() internally allocates memory for ranges using kvcalloc(), which may use vmalloc() for large allocation. Using kfree() to release vmalloc memory will lead to a memory corruption. Use kvfree() to safely handle both kmalloc and vmalloc allocations. Compile tested only. Issue found using a prototype static analysis tool and code review.