CVE-2026-63879 drm/amdgpu: fix amdgpu_hmm_range_get_pages
A race condition in the AMD GPU driver's HMM range handling could lead to the use of invalid pages, potentially causing system instability or crashes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-63879?
CVE-2026-63879 is a high-severity vulnerability in Linux kernel, published on 19 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix amdgpu_hmm_range_get_pages
The notifier sequence must only be read once or otherwise we could work with invalid pages.
While at it also fix the coding style, e.g. drop the pre-initialized return value and use the common define for 2G range.
(cherry picked from commit c08972f555945cda57b0adb72272a37910153390)
Weakness: CWE-362
Which versions are affected by CVE-2026-63879?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-63879?
Apply the vendor's patch.
Is CVE-2026-63879 being exploited?
There is no known exploitation of CVE-2026-63879 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-92790, BELL-CVE-2026-63879, DEBIAN-CVE-2026-63879, GHSA-497j-x834-cghh, ROOT-OS-DEBIAN-13-CVE-2026-63879, ROOT-OS-UBUNTU-2204-CVE-2026-63879 and 1 more.