CVE-2026-46229

EUVD-2026-32856
In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure

KFD VRAM allocations set AMDGPU_GEM_CREATE_VRAM_WIPE_ON_RELEASE
but not AMDGPU_GEM_CREATE_VRAM_CLEARED, leaving freshly allocated
VRAM with stale data from prior use observable by compute kernels.

The GEM ioctl path already sets VRAM_CLEARED for all userspace
allocations via amdgpu_gem_create_ioctl() and
amdgpu_mode_dumb_create(). The KFD path was missing this flag,
allowing stale page table remnants to leak into user buffers.

This causes crashes in RCCL P2P transport where non-zero data in
ptrExchange/head/tail fields corrupts the protocol handshake.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 2%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.4 ≤
𝑥
< 6.6.140
linuxlinux_kernel
6.7 ≤
𝑥
< 6.12.90
linuxlinux_kernel
6.13 ≤
𝑥
< 6.18.32
linuxlinux_kernel
6.19 ≤
𝑥
< 7.0.9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
vulnerable
bookworm (security)
vulnerable
bullseye
vulnerable
bullseye (security)
vulnerable
forky
7.1.3-1
fixed
sid
7.1.3-1
fixed
trixie
6.12.94-1
fixed
trixie (security)
6.12.95-1
fixed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
kernel-64kb
suse enterprise desktop 15 SP7
6.4.0-150700.53.66.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.66.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.66.1
fixed
kernel-default
suse enterprise desktop 15 SP7
6.4.0-150700.53.66.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.66.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.66.1
fixed
kernel-default-base
suse enterprise desktop 15 SP7
6.4.0-150700.53.66.1.150700.17.39.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.66.1.150700.17.39.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.66.1.150700.17.39.1
fixed
kernel-obs-build
suse enterprise desktop 15 SP7
6.4.0-150700.53.66.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.66.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.66.1
fixed
kernel-source
suse enterprise desktop 15 SP7
6.4.0-150700.53.66.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.66.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.66.1
fixed
kernel-zfcpdump
suse enterprise desktop 15 SP7
6.4.0-150700.53.66.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.66.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.66.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
kernel
Azure Linux 3.0
0:6.6.141.1-1.azl3
fixed