CVE-2026-53374 drm/amdgpu: zero-initialize GART table on allocation
An attacker with local access can read uninitialized memory via speculative GPU TLB loads due to missing zero-initialization in the amdgpu driver.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-53374?
CVE-2026-53374 is a high-severity vulnerability in Linux kernel, published on 19 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: zero-initialize GART table on allocation
GART TLB is flushed after unmapping but not after mapping. Since amdgpu_bo_create_kernel() does not zero-initialize the buffer, when a single PTE is written the TLB may speculatively load other uninitialized entries from the same cacheline. Those garbage entries can appear valid, and a subsequent write to another PTE in the same cacheline may cause the GPU to use a stale garbage PTE from the TLB.
Fix this by calling memset_io() to zero-initialize the GART table with gart_pte_flags immediately after allocation.
Using AMDGPU_GEM_CREATE_VRAM_CLEARED, SDMA-based clear will not work since SDMA needs GART to be initialized to work.
(cherry picked from commit d9af8263b82b6eaa60c5718e0c6631c5037e4b24)
Weakness: CWE-457
Which versions are affected by CVE-2026-53374?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-53374?
Apply the vendor's patch.
Is CVE-2026-53374 being exploited?
There is no known exploitation of CVE-2026-53374 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-92543, BELL-CVE-2026-53374, DEBIAN-CVE-2026-53374, GHSA-45w5-677j-gmrq, ROOT-OS-DEBIAN-11-CVE-2026-53374, ROOT-OS-UBUNTU-2204-CVE-2026-53374 and 1 more.