drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix error path at svm_migrate_copy_to_ram If page migration from device to sys ram fails for some reasons driver needs release and unlock allocated system pages. To do that driver should use page physical address, or pfn, then get struct page*. Current driver uses dma address(for adev) that is not correct with IOMMU enabled, or even in general. The patch releases and unlocks allocated system pages based on where migration failed by struct page* of sys ram pages. Also dma_unmap correspodent system ram pages at error path.
CVE-2026-89810
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-89810
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "48ff079b28d82dbce000cc45c0fd35b6ae9ffbda",
"lessThan": "44cad7ea3532f14999008d899daacc4ce4b633bf",
"versionType": "git"
},
{
"status": "affected",
"version": "48ff079b28d82dbce000cc45c0fd35b6ae9ffbda",
"lessThan": "872b7427e64f3e84b16c62577cbf3cd09a3401a2",
"versionType": "git"
},
{
"status": "affected",
"version": "48ff079b28d82dbce000cc45c0fd35b6ae9ffbda",
"lessThan": "da87bcad1f781d822e7ced6d1de9dbc6d381c72e",
"versionType": "git"
},
{
"status": "affected",
"version": "48ff079b28d82dbce000cc45c0fd35b6ae9ffbda",
"lessThan": "a2035918a7a1d8fd3bb79d22e1e149294a5a8418",
"versionType": "git"
},
{
"status": "affected",
"version": "48ff079b28d82dbce000cc45c0fd35b6ae9ffbda",
"lessThan": "960c4a8069bfd352c48cc88592618f1ebe24c69e",
"versionType": "git"
}
],
"programFiles": [
"drivers/gpu/drm/amd/amdkfd/kfd_migrate.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.14"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.14",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.6.160",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.114",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.51",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.5",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/gpu/drm/amd/amdkfd/kfd_migrate.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-89810
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #48548 · Revision 1
- Added to Heist Feed
- Publisher date