CVE-2026-80541

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-80541

Key Details

CVE	CVE-2026-80541
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: validate GEM_CREATE domain combinations

AMDGPU_GEM_CREATE checked domain bits against AMDGPU_GEM_DOMAIN_MASK,

but did not validate domain combinations. Userspace could combine

CPU|GTT|VRAM with DOORBELL, GDS, GWS, or OA, making

amdgpu_bo_placement_from_domain() exceed AMDGPU_BO_MAX_PLACEMENTS and

hit BUG_ON().

Allow combinations only within CPU/GTT/VRAM, and require non-CPU/GTT/

VRAM domains to be specified one at a time. Return -EINVAL for invalid

combinations in amdgpu_gem_create_ioctl().

v2: Rename helper from amdgpu_gem_domain_valid() to

amdgpu_gem_are_domains_valid() (Christian)

(cherry picked from commit db39852d0c39843cb02048dfb47e4b8c703e9080) (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-80541
CVE	https://www.cve.org/CVERecord?id=CVE-2026-80541

Source

Reference

NVD

CVE