What’s Vulnerable › Vulnerabilities

CVE-2021-4460: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-01 · updated 2026-08-11
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up doing a shift operation where the number of bits shifted equals number of bits in the operand. This behaviour is undefined. Set num_sdma_queues or num_xgmi_sdma_queues to ULLONG_MAX, if the count is >= number of bits in the operand. Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1472

Affected products

• Linux kernel: before 5.4.118; from 5.5 before 5.10.36; from 5.11 before 5.11.20; from 5.12 before 5.12.3 — fixed in 5.10.36, 5.11.20, 5.12.3, 5.4.118

How to fix

Upgrade to a fixed version: Linux kernel 5.10.36, 5.11.20, 5.12.3, 5.4.118. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0c0356ef2498c1a250fe3846f30293f828737309
• https://git.kernel.org/stable/c/1874b0ef1426b873de94c61861e38f29a8df714c
• https://git.kernel.org/stable/c/3fdc5182700910a685d23df57d65166e8556a266
• https://git.kernel.org/stable/c/50e2fc36e72d4ad672032ebf646cecb48656efe0
• https://git.kernel.org/stable/c/9069b1b542de8f3bbffef868aff41521b21485cf

Get alerted when CVE-2021-4460 or the next vulnerability affects your stack