CVE-2026-63881CWE-190

CVE-2026-63881

High · published July 19, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger

get_queue_ids() computes array_size = num_queues * sizeof(uint32_t),

which could overflow on 32-bit size_t build. using array_size()

instead, it saturates to SIZE_MAX on overflow.

(cherry picked from commit 2d57a0475f085c08b49312dfd8edcb461845f285)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.1th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2026-07-19T20:17Z
References (5)
EPSS history
Timeline
  • 19 JUL 14:54Z
    drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger
    cvelistv5