CVE-2026-98905 Linux CVE debrief

Who should care

Linux kernel developers, users who rely on CRIU functionality, and administrators responsible for maintaining Linux systems. These individuals should verify and apply patches to prevent potential issues. Additionally, they should review and understand the vulnerability's impact on their systems and take necessary precautions to ensure the drm/amdkfd component is updated and CRIU restore operations are correctly configured.

Why it matters

A vulnerability in the Linux kernel's drm/amdkfd component has been addressed, and users should verify and apply patches to prevent potential issues.

• Verify CRIU restore operations to prevent potential issues.
• Review and apply patches to ensure the drm/amdkfd component is updated.
• Monitor Linux kernel updates for related security advisories or patches.

Technical summary

The Linux kernel's drm/amdkfd component has a vulnerability related to acquiring queue buffers during CRIU restore operations. The issue has been resolved through a series of patches, including commit 88ed96abbbe27b70193544fbc1ee06448c274714. The fix ensures that queue buffers are properly acquired during CRIU restore operations, preventing potential null pointer dereferences. The vulnerability was introduced due to a missed call to kfd_queue_acquire_buffers() in set_queue_properties_from_criu(). This can lead to null pointer dereferences when subsequent code expects these buffers to be non-null.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the provided patches to ensure the drm/amdkfd component is properly updated.
• Verify that CRIU restore operations are correctly configured and functioning as expected.
• Monitor Linux kernel updates for any related security advisories or patches.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Review compensating controls for exposed systems while remediation is scheduled and verified.

Evidence notes

The CVE record and source item provide details about the vulnerability and its resolution. However, there is limited information about potential exploitation or affected systems. The vulnerability was resolved through a series of patches, including commit 88ed96abbbe27b70193544fbc1ee06448c274714. The fix ensures that queue buffers are properly acquired during CRIU restore operations, preventing potential null pointer dereferences. Linux kernel developers and users relying on CRIU functionality should verify and apply patches to their

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.