CVE-2026-45853 PUBLISHED

drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()

Assigner: Linux
Reserved: 13.05.2026 Published: 27.05.2026 Updated: 27.05.2026

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()

amdgpu_discovery_get_nps_info() internally allocates memory for ranges using kvcalloc(), which may use vmalloc() for large allocation. Using kfree() to release vmalloc memory will lead to a memory corruption.

Use kvfree() to safely handle both kmalloc and vmalloc allocations.

Compile tested only. Issue found using a prototype static analysis tool and code review.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from b194d21b9bcc15b50df1bc3ff7428e51c2918a6f to 16e7e7ad8cdc6b4c4af7f31e262f1494c1b2a55e (excl.)
  • affected from b194d21b9bcc15b50df1bc3ff7428e51c2918a6f to 9ae85b0c1909b6c6bfd2636b04cdaf7f520bf2b5 (excl.)
  • affected from b194d21b9bcc15b50df1bc3ff7428e51c2918a6f to f441538893eba6347b983f2904819ca6c99da65e (excl.)
  • affected from b194d21b9bcc15b50df1bc3ff7428e51c2918a6f to 0c44d61945c4a80775292d96460aa2f22e62f86c (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.11 is affected
  • unaffected from 0 to 6.11 (excl.)
  • unaffected from 6.12.75 to 6.12.* (incl.)
  • unaffected from 6.18.14 to 6.18.* (incl.)
  • unaffected from 6.19.4 to 6.19.* (incl.)
  • unaffected from 7.0 to * (incl.)

References