CVE-2026-46229
Published: May 28, 2026
Modified: May 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure KFD VRAM allocations set AMDGPU_GEM_CREATE_VRAM_WIPE_ON_RELEASE but not AMDGPU_GEM_CREATE_VRAM_CLEARED, leaving freshly allocated VRAM with stale data from prior use observable by compute kernels. The GEM ioctl path already sets VRAM_CLEARED for all userspace allocations via amdgpu_gem_create_ioctl() and amdgpu_mode_dumb_create(). The KFD path was missing this flag, allowing stale page table remnants to leak into user buffers. This causes crashes in RCCL P2P transport where non-zero data in ptrExchange/head/tail fields corrupts the protocol handshake.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 6856e4b65f64eeb3f17148f79b36c1d60c627529 - < 1db431380879fd9d28b763a88a0c0431be5be8dfaffected 6856e4b65f64eeb3f17148f79b36c1d60c627529 - < 32b153658f017ad2f5bf8aab479e8d16ac95bc3aaffected 6856e4b65f64eeb3f17148f79b36c1d60c627529 - < 77d0b5d11387071770246fd0185a69fa28e8e109affected 6856e4b65f64eeb3f17148f79b36c1d60c627529 - < 047d44d8d29a6a1a5757256837aa9dd78e3cd0b5affected 6856e4b65f64eeb3f17148f79b36c1d60c627529 - < ad52d61d82181dbdb7f05826de38352d5e550cc2 |
Linux | Linux | affected 5.4unaffected 0 - < 5.4unaffected 6.6.140 - <= 6.6.*unaffected 6.12.90 - <= 6.12.*unaffected 6.18.32 - <= 6.18.*+2 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now