PT-2026-61081 · Linux · Linux Kernel

CVE-2026-53376 · Published 2026-07-19 · Updated 2026-07-20

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.140

Description The issue exists in the drm/amdkfd component of the Linux kernel. A lack of upper bound validation for the num of nodes variable in the kfd ioctl get process apertures new() function allows malformed input to reach the GPU aperture handling process.

Recommendations Update to Linux kernel version 6.6.140 or later.

Related Identifiers

CVE-2026-53376

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-53376 · Security Note
• https://git.kernel.org/stable/c/4a8093c7def141cc6e854fbe3f9693867982418f · Note
• https://git.kernel.org/stable/c/6ba6ec5fcbb0d03ca11ed1cc38d57a7deb6c6b20 · Note
• https://git.kernel.org/stable/c/44d5a450c04d3d734c13a03561c3131020d66edf · Note
• https://git.kernel.org/stable/c/74b73fa56a395d46745e4f245225963e9f8be7f1 · Note
• https://git.kernel.org/stable/c/7b80137eb8aa9d1cbfe7ccf3eeb1faa94ae35d7e · Note
• https://twitter.com/windowsforum/status/2079103300847251826 · Twitter Post