PT-2026-61079 · Amd+1 · Amd Npu Driver+1

CVE-2026-53374 · Published 2026-07-19 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the AMD GPU driver, the GART (Graphics Address Remapping Table) table is not zero-initialized during allocation in the amdgpu bo create kernel() function. Because the GART TLB (Translation Lookaside Buffer) is not flushed after mapping, the TLB may speculatively load uninitialized entries from the same cacheline when a single PTE (Page Table Entry) is written. These garbage entries may appear valid, potentially causing the GPU to use a stale garbage PTE from the TLB after a subsequent write to another PTE in the same cacheline.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53374

Affected Products

Amd Npu Driver

Linux Kernel

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-53374 · Security Note
• https://git.kernel.org/stable/c/791941be5da125d9a1b228582bfdc300c05d05b3 · Note
• https://git.kernel.org/stable/c/91fbb5e635c8fb1b49e15c19da06480089ef719f · Note
• https://git.kernel.org/stable/c/b17175d0a375b3ed5e81597dac4983fdb46e478d · Note
• https://git.kernel.org/stable/c/40df11255d71b02e20e70579f1b12b687e396e26 · Note
• https://twitter.com/VulmonFeeds/status/2078825437354987546 · Twitter Post
• https://twitter.com/DFIR_Lab/status/2079382220259692856 · Twitter Post
• https://git.kernel.org/stable/c/8ae8b9e74bab94aab1d79f1688129bcc61c8b29a · Note
• https://git.kernel.org/stable/c/e6c2e6c2e1fa066968a16aca1cb66cd1bdde7741 · Note