CVE-2026-53374: Linux Kernel

High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not after mapping. Since amdgpu_bo_create_kernel() does not zero-initialize the buffer, when a single PTE is written the TLB may speculatively load other uninitialized entries from the same cacheline. Those garbage entries can appear valid, and a subsequent write to another PTE in the same cacheline may cause the GPU to use a stale garbage PTE from the TLB. Fix this by calling memset_io() to zero-initialize the GART table with gart_pte_flags immediately after allocation. Using AMDGPU_GEM_CREATE_VRAM_CLEARED, SDMA-based clear will not work since SDMA needs GART to be initialized to work. (cherry picked from commit d9af8263b82b6eaa60c5718e0c6631c5037e4b24)

Affected products

• Linux Linux Kernel: from 4.2, before 6.1.175 (fixed in 6.1.175); from 6.2, before 6.6.140 (fixed in 6.6.140); from 6.7, before 6.12.90 (fixed in 6.12.90); from 6.13, before 6.18.32 (fixed in 6.18.32); from 6.19, before 7.0.9 (fixed in 7.0.9); version 7.1 only

Published 2026-07-19. Last modified 2026-07-29.