PT-2026-44352 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-06-04 · CVE-2026-46229

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue in the drm/amdkfd component allows stale data exposure during VRAM allocation. While the GEM ioctl path correctly sets the AMDGPU GEM CREATE VRAM CLEARED flag for userspace allocations via amdgpu gem create ioctl() and amdgpu mode dumb create(), the KFD path lacks this flag. Consequently, freshly allocated VRAM may contain remnants from previous use, such as stale page table data, which can be observed by compute kernels. This can lead to crashes in RCCL P2P transport due to the corruption of the protocol handshake caused by non-zero data in the ptrExchange, head, and tail fields.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-46229

ECHO-6269-C44C-52C3

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 289

• https://ubuntu.com/security/CVE-2026-46229 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46229 · Security Note
• https://git.kernel.org/stable/c/32b153658f017ad2f5bf8aab479e8d16ac95bc3a · Patch
• https://cve.org/CVERecord?id=CVE-2026-46229 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46229 · Vendor Advisory
• https://git.kernel.org/stable/c/77d0b5d11387071770246fd0185a69fa28e8e109 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46229 · Vendor Advisory
• https://git.kernel.org/stable/c/ad52d61d82181dbdb7f05826de38352d5e550cc2 · Patch
• https://git.kernel.org/stable/c/047d44d8d29a6a1a5757256837aa9dd78e3cd0b5 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-46229 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-46229 · Vendor Advisory
• https://git.kernel.org/stable/c/1db431380879fd9d28b763a88a0c0431be5be8df · Patch
• https://suse.com/security/cve/CVE-2026-46217 · Note
• https://suse.com/security/cve/CVE-2026-46092 · Note