CVE-2026-74448 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, users of Linux distributions with the affected kernel versions, and security teams responsible for patch management and vulnerability mitigation.

Technical summary

The vulnerability occurs in pqm_create_queue() when MES is enabled and amdgpu_amdkfd_alloc_kernel_mem() fails during the first queue creation for a process. The fix involves replacing 'return retval' with 'goto err_allocate_pqn' to ensure proper cleanup and prevent QID bit leaks. This issue affects the Linux kernel's drm/amdkfd component, potentially leading to queue slot exhaustion over time. The defensive impact is medium, and the source-grounded technical framing indicates a high severity issue.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the provided patch to the Linux kernel's drm/amdkfd component
• Monitor Linux kernel updates for additional fixes related to drm/amdkfd
• Consider implementing compensating controls to detect and prevent potential exploitation
• Perform thorough testing of the patched kernel version
• Review system logs for signs of potential exploitation
• Inventory affected systems and prioritize patching based on risk
• Track patch deployment and verify successful implementation

Evidence notes

The vulnerability was resolved by replacing 'return retval' with 'goto err_allocate_pqn' in pqm_create_queue() to ensure clear_bit() is always called on the error path. This fix prevents QID bit leaks, potentially exhausting all available queue slots over time. Linux kernel developers should verify the patch implementation and test it thoroughly. The fix was introduced in a specific commit (a107f74c38edbb80d6ab64dcaeeb292c14e9779f) and backported to relevant kernel versions. Further review of the drm/amdkfd component may be necessary to identify similar issues.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.