CVE-2026-43206

EUVD-2026-27767
In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()

The kfd_event_page_set() function writes KFD_SIGNAL_EVENT_LIMIT * 8
bytes via memset without checking the buffer size parameter. This allows
unprivileged userspace to trigger an out-of bounds kernel memory write
by passing a small buffer, leading to  potential privilege
escalation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
4.17 ≤
𝑥
< 5.10.252
linuxlinux_kernel
5.11 ≤
𝑥
< 5.15.202
linuxlinux_kernel
5.16 ≤
𝑥
< 6.1.165
linuxlinux_kernel
6.2 ≤
𝑥
< 6.6.128
linuxlinux_kernel
6.7 ≤
𝑥
< 6.12.75
linuxlinux_kernel
6.13 ≤
𝑥
< 6.18.16
linuxlinux_kernel
6.19 ≤
𝑥
< 6.19.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.170-3
fixed
bookworm (security)
6.1.174-1
fixed
bullseye
vulnerable
bullseye (security)
5.10.257-1
fixed
forky
7.0.12-2
fixed
sid
7.0.13-1
fixed
trixie
6.12.86-1
fixed
trixie (security)
6.12.94-1
fixed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cluster-md-kmp-default
suse enterprise server 12 SP5
4.12.14-122.317.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1
fixed
dlm-kmp-default
suse enterprise server 12 SP5
4.12.14-122.317.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1
fixed
gfs2-kmp-default
suse enterprise server 12 SP5
4.12.14-122.317.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1
fixed
kernel-64kb
suse enterprise desktop 15 SP7
6.4.0-150700.53.60.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.60.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.222.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.60.1
fixed
kernel-default
suse enterprise desktop 15 SP7
6.4.0-150700.53.60.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.60.1
fixed
suse enterprise server 12 SP5
4.12.14-122.317.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.222.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.60.1
fixed
kernel-default-base
suse enterprise desktop 15 SP7
6.4.0-150700.53.60.1.150700.17.35.4
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.60.1.150700.17.35.4
fixed
suse enterprise server 12 SP5
4.12.14-122.317.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.222.1.150400.24.112.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1.150500.6.79.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1.150600.12.54.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.60.1.150700.17.35.4
fixed
kernel-default-man
suse enterprise server 12 SP5
4.12.14-122.317.1
fixed
kernel-obs-build
suse enterprise desktop 15 SP7
6.4.0-150700.53.60.2
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.60.2
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.222.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.60.2
fixed
kernel-source
suse enterprise desktop 15 SP7
6.4.0-150700.53.60.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.60.1
fixed
suse enterprise server 12 SP5
4.12.14-122.317.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.222.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.60.1
fixed
kernel-zfcpdump
suse enterprise desktop 15 SP7
6.4.0-150700.53.60.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.60.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.222.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.60.1
fixed
ocfs2-kmp-default
suse enterprise server 12 SP5
4.12.14-122.317.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1
fixed
reiserfs-kmp-default
suse enterprise server 15 SP4
5.14.21-150400.24.222.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.169.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.115.1
fixed