What’s Vulnerable › Vulnerabilities

CVE-2026-63879: drm/amdgpu: fix amdgpu_hmm_range_get_pages

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-19 · updated 2026-10-26
• Weakness: CWE-362

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpu_hmm_range_get_pages The notifier sequence must only be read once or otherwise we could work with invalid pages. While at it also fix the coding style, e.g. drop the pre-initialized return value and use the common define for 2G range. (cherry picked from commit c08972f555945cda57b0adb72272a37910153390)

Affected products

• Linux kernel: from 6.2 before 6.6.160; from 6.7 before 6.12.114; from 6.13 before 6.18.57; from 6.19 before 7.0.12; 7.1-rc1, 7.1-rc2, 7.1-rc3, 7.1-rc4, 7.1-rc5 — fixed in 6.6.160, 6.12.114, 6.18.57, 7.0.12
• Linux kernel: 6.2 — fixed in 7.1

How to fix

Upgrade to a fixed version: Linux kernel 6.6.160, 6.12.114, 6.18.57, 7.0.12; Linux kernel 7.1. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2fd24407457a6b181ba827705678da70e528dcd0
• https://git.kernel.org/stable/c/93a9f121de6383f20290840d025ee28fda5f53b5
• https://git.kernel.org/stable/c/962d684b5dc0741dcd93485d41b450de402d5592
• https://git.kernel.org/stable/c/e35cf322897dd4921248d11311a89c865b534c14
• https://git.kernel.org/stable/c/fa34d3e14cb763b50702e8a0f7d4cfd877a73ab9

Get alerted when CVE-2026-63879 or the next vulnerability affects your stack