rocm security

CVE-2026-68257 fixes a size-calculation flaw in the Linux kernel’s AMD Kernel Fusion Driver, or amdkfd, that can leave AMD GPU compute firmware writing past the end of a context save-and-restore buffer. The National Vulnerability Database published the record on August 10, and the underlying...

CVE-2026-63881 is a newly published Linux kernel vulnerability in AMD’s Kernel Fusion Driver, or KFD, that deserves attention from GPU-compute users even though its practical exposure is narrower than its High severity label initially suggests. The flaw sits in the AMDGPU KFD debugger path...

Linux kernel maintainers have published a fix for CVE-2026-53376, a vulnerability in the AMDGPU Kernel Fusion Driver component, or AMD KFD, that affects the kfd_ioctl_get_process_apertures_new ioctl path. The patch adds an upper-bound validation for num_of_nodes, closing a missing input check in...