CVE-2026-98177
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid integer underflow in EOP ring size calculation. The low 6 bits of cp_hqd_eop_control store the base-2 logarithm of the EOP ring size. This was calculated as order_base_2(q->eop_ring_buffer_size / 4) - 1 But order_base_2 can in theory return 0, so this could underflow (although in practice the ring buffer size cannot be less than 4096). Change this to order_base_2(q->eop_ring_buffer_size / 8) using properties of logarithms. Also add to the above comment to make the mathematics more clear. (cherry picked from commit f0f43fcf8b2b3a924cad9444340921c96ed5f634)
Affected versions
Linux kernel versions
4.3
and later are affected. Fixed in
7.2.8,
7.3-rc4
and their respective stable series.
References
2 totalFrequently asked questions
-
What is CVE-2026-98177?
CVE-2026-98177 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 4.3 onward and has been patched in 7.2.8 and 7.3-rc4. CVE-2026-98177 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98177?
Yes. CVE-2026-98177 has been patched. Fixed versions include 7.2.8 and 7.3-rc4. If you are running Linux kernel 4.3 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98177 actively exploited?
No. CVE-2026-98177 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.