CVE-2026-43206

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43206
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() The kfd_event_page_set() function writes KFD_SIGNAL_EVENT_LIMIT * 8 bytes via memset without checking the buffer size parameter. This allows unprivileged userspace to trigger an out-of bounds kernel memory write by passing a small buffer, leading to potential privilege escalation.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3e04bc310d80b46eaf481f1fefcbcb37a187412d Patch
https://git.kernel.org/stable/c/4857c37c7ba9aa38b9a4c694e8bd8d0091c87940 Patch
https://git.kernel.org/stable/c/4e72f419e4ed44cb3b60506752d8688c20a60a9b Patch
https://git.kernel.org/stable/c/75fb57efdd7863fffbc39db23e9cad7aafda26ed Patch
https://git.kernel.org/stable/c/8a70a26c9f34baea6c3199a9862ddaff4554a96d Patch
https://git.kernel.org/stable/c/b4034442cb090e4a980bdcc1540948606cbc951b Patch
https://git.kernel.org/stable/c/bfcd6b53e1f4feb182952f4ff9a137c36ceaf20b Patch
https://git.kernel.org/stable/c/de8d7a25cd2eb5875b1d8d4fbc7fe4b4138b781f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

11 May 2026, 20:05

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-787
References () https://git.kernel.org/stable/c/3e04bc310d80b46eaf481f1fefcbcb37a187412d - () https://git.kernel.org/stable/c/3e04bc310d80b46eaf481f1fefcbcb37a187412d - Patch
References () https://git.kernel.org/stable/c/4857c37c7ba9aa38b9a4c694e8bd8d0091c87940 - () https://git.kernel.org/stable/c/4857c37c7ba9aa38b9a4c694e8bd8d0091c87940 - Patch
References () https://git.kernel.org/stable/c/4e72f419e4ed44cb3b60506752d8688c20a60a9b - () https://git.kernel.org/stable/c/4e72f419e4ed44cb3b60506752d8688c20a60a9b - Patch
References () https://git.kernel.org/stable/c/75fb57efdd7863fffbc39db23e9cad7aafda26ed - () https://git.kernel.org/stable/c/75fb57efdd7863fffbc39db23e9cad7aafda26ed - Patch
References () https://git.kernel.org/stable/c/8a70a26c9f34baea6c3199a9862ddaff4554a96d - () https://git.kernel.org/stable/c/8a70a26c9f34baea6c3199a9862ddaff4554a96d - Patch
References () https://git.kernel.org/stable/c/b4034442cb090e4a980bdcc1540948606cbc951b - () https://git.kernel.org/stable/c/b4034442cb090e4a980bdcc1540948606cbc951b - Patch
References () https://git.kernel.org/stable/c/bfcd6b53e1f4feb182952f4ff9a137c36ceaf20b - () https://git.kernel.org/stable/c/bfcd6b53e1f4feb182952f4ff9a137c36ceaf20b - Patch
References () https://git.kernel.org/stable/c/de8d7a25cd2eb5875b1d8d4fbc7fe4b4138b781f - () https://git.kernel.org/stable/c/de8d7a25cd2eb5875b1d8d4fbc7fe4b4138b781f - Patch
First Time Linux linux Kernel
Linux

08 May 2026, 13:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

06 May 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 12:16

Updated : 2026-05-11 20:05

NVD link : CVE-2026-43206

Mitre link : CVE-2026-43206

CVE.ORG link : CVE-2026-43206

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write