📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global supply_chain Software Development and Technology HIGH 1h Global apt Government/Critical Infrastructure CRITICAL 3h Global vulnerability Enterprise Software / Data Analytics CRITICAL 3h Global vulnerability Artificial Intelligence and Technology HIGH 7h Global general Technology and Artificial Intelligence MEDIUM 10h Global general Technology and Artificial Intelligence HIGH 11h Global vulnerability Higher Education CRITICAL 20h Global data_breach Government HIGH 21h Global supply_chain Software Development and Open Source Communities CRITICAL 21h Global malware Software Development CRITICAL 21h Global supply_chain Software Development and Technology HIGH 1h Global apt Government/Critical Infrastructure CRITICAL 3h Global vulnerability Enterprise Software / Data Analytics CRITICAL 3h Global vulnerability Artificial Intelligence and Technology HIGH 7h Global general Technology and Artificial Intelligence MEDIUM 10h Global general Technology and Artificial Intelligence HIGH 11h Global vulnerability Higher Education CRITICAL 20h Global data_breach Government HIGH 21h Global supply_chain Software Development and Open Source Communities CRITICAL 21h Global malware Software Development CRITICAL 21h Global supply_chain Software Development and Technology HIGH 1h Global apt Government/Critical Infrastructure CRITICAL 3h Global vulnerability Enterprise Software / Data Analytics CRITICAL 3h Global vulnerability Artificial Intelligence and Technology HIGH 7h Global general Technology and Artificial Intelligence MEDIUM 10h Global general Technology and Artificial Intelligence HIGH 11h Global vulnerability Higher Education CRITICAL 20h Global data_breach Government HIGH 21h Global supply_chain Software Development and Open Source Communities CRITICAL 21h Global malware Software Development CRITICAL 21h
Vulnerabilities

CVE-2026-31566

High
CWE-416 — Weakness Type
Published: Apr 24, 2026  ·  Modified: May 1, 2026  ·  Source: NVD
CVSS v3
7.8
🔗 NVD Official
📄 Description (English)

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib

amdgpu_amdkfd_submit_ib() submits a GPU job and gets a fence
from amdgpu_ib_schedule(). This fence is used to wait for job
completion.

Currently, the code drops the fence reference using dma_fence_put()
before calling dma_fence_wait().

If dma_fence_put() releases the last reference, the fence may be
freed before dma_fence_wait() is called. This can lead to a
use-after-free.

Fix this by waiting on the fence first and releasing the reference
only after dma_fence_wait() completes.

Fixes the below:
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c:697 amdgpu_amdkfd_submit_ib() warn: passing freed memory 'f' (line 696)

(cherry picked from commit 8b9e5259adc385b61a6590a13b82ae0ac2bd3482)

🤖 AI Executive Summary

CVE-2026-31566 is a use-after-free vulnerability in the Linux kernel's AMD GPU driver (amdgpu) affecting the amdgpu_amdkfd_submit_ib() function. The vulnerability occurs when a fence reference is released before waiting for job completion, potentially allowing the fence object to be freed while still in use. This could lead to kernel memory corruption, denial of service, or privilege escalation on systems with AMD GPUs.

📄 Description (Arabic)

🤖 AI Intelligence Analysis Analyzed: Apr 29, 2026 11:54
🇸🇦 Saudi Arabia Impact Assessment
This vulnerability primarily affects Saudi organizations operating high-performance computing infrastructure, data centers, and research institutions utilizing AMD GPU-accelerated systems. Critical impact sectors include: ARAMCO (upstream/downstream computing clusters), KAUST (research computing), Saudi Aramco Energy Ventures (SAEV) data centers, telecommunications providers (STC, Mobily) with GPU-based infrastructure, and government research facilities. The vulnerability could compromise system stability and data integrity in GPU-accelerated workloads, particularly affecting financial modeling, seismic analysis, and AI/ML applications critical to Saudi's Vision 2030 digital transformation initiatives.
🏢 Affected Saudi Sectors
Energy (ARAMCO, oil & gas computing) Research & Academia (KAUST, universities) Data Centers and Cloud Infrastructure Telecommunications (STC, Mobily) Government Research Facilities Financial Services (GPU-accelerated trading/modeling)
⚖️ Saudi Risk Score (AI)
6.2
/ 10.0
🔧 Remediation Steps (English)
IMMEDIATE ACTIONS:
1. Identify systems running Linux kernel versions 6.0 through 7.0-rc4 with AMD GPU drivers (amdgpu)
2. Check kernel version: uname -r
3. Verify AMD GPU presence: lspci | grep -i amd

PATCHING GUIDANCE:
1. Update to Linux kernel 7.0 final release or later
2. For RHEL/CentOS: yum update kernel
3. For Ubuntu/Debian: apt update && apt upgrade linux-image-generic
4. Apply the specific patch commit 8b9e5259adc385b61a6590a13b82ae0ac2bd3482 if kernel update unavailable
5. Reboot system after kernel update

COMPENSATING CONTROLS (if immediate patching unavailable):
1. Disable GPU compute workloads if not critical
2. Implement kernel module blacklisting: echo 'blacklist amdgpu' >> /etc/modprobe.d/blacklist.conf (if GPU not required)
3. Monitor system logs for kernel panics: journalctl -p err
4. Implement resource limits on GPU processes

DETECTION RULES:
1. Monitor kernel logs for: 'use-after-free', 'amdgpu_amdkfd_submit_ib', 'dma_fence'
2. Watch for unexpected kernel panics or GPU driver crashes
3. Alert on: dmesg | grep -i 'amdgpu\|fence\|use-after-free'
4. Enable kernel debugging: echo 1 > /proc/sys/kernel/printk
🔧 خطوات المعالجة (العربية)
الإجراءات الفورية:
1. تحديد الأنظمة التي تعمل بإصدارات نواة Linux من 6.0 إلى 7.0-rc4 مع مشغلات AMD GPU (amdgpu)
2. التحقق من إصدار النواة: uname -r
3. التحقق من وجود AMD GPU: lspci | grep -i amd

إرشادات التصحيح:
1. التحديث إلى إصدار نواة Linux 7.0 النهائي أو أحدث
2. لـ RHEL/CentOS: yum update kernel
3. لـ Ubuntu/Debian: apt update && apt upgrade linux-image-generic
4. تطبيق التصحيح المحدد commit 8b9e5259adc385b61a6590a13b82ae0ac2bd3482 إذا لم يكن تحديث النواة متاحاً
5. إعادة تشغيل النظام بعد تحديث النواة

الضوابط البديلة (إذا لم يكن التصحيح الفوري متاحاً):
1. تعطيل أعباء عمل GPU الحسابية إذا لم تكن حرجة
2. تنفيذ إدراج وحدة النواة في القائمة السوداء: echo 'blacklist amdgpu' >> /etc/modprobe.d/blacklist.conf
3. مراقبة سجلات النظام للأعطال: journalctl -p err
4. تنفيذ حدود الموارد على عمليات GPU

قواعد الكشف:
1. مراقبة سجلات النواة عن: 'use-after-free', 'amdgpu_amdkfd_submit_ib', 'dma_fence'
2. مراقبة أعطال مشغل GPU غير المتوقعة
3. التنبيه على: dmesg | grep -i 'amdgpu\|fence\|use-after-free'
4. تفعيل تصحيح النواة: echo 1 > /proc/sys/kernel/printk
📋 Regulatory Compliance Mapping
🟢 NCA ECC 2024
ECC-2024-5.1.1: System Hardening and Patch Management ECC-2024-5.2.2: Vulnerability Management and Assessment ECC-2024-5.3.1: Security Monitoring and Incident Detection
🔵 SAMA CSF
ID.RA-1: Asset Management and Inventory PR.IP-12: System and Information Integrity DE.CM-8: Vulnerability Scanning and Assessment
🟡 ISO 27001:2022
A.12.6.1: Management of technical vulnerabilities A.14.2.1: Secure development policy A.12.2.1: Monitoring and logging
📦 Affected Products / CPE 13 entries
linux:linux_kernel
linux:linux_kernel
linux:linux_kernel
linux:linux_kernel
linux:linux_kernel
linux:linux_kernel:6.0
linux:linux_kernel:7.0
linux:linux_kernel:7.0
linux:linux_kernel:7.0
linux:linux_kernel:7.0
linux:linux_kernel:7.0
linux:linux_kernel:7.0
linux:linux_kernel:7.0
📊 CVSS Score
7.8
/ 10.0 — High
📊 CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorL — Low / Local
Attack ComplexityL — Low / Local
Privileges RequiredL — Low / Local
User InteractionN — None / Network
ScopeU — Unchanged
ConfidentialityH — High
IntegrityH — High
AvailabilityH — High
📋 Quick Facts
Severity High
CVSS Score7.8
CWECWE-416
EPSS0.01%
Exploit No
Patch ✓ Yes
Published 2026-04-24
Source Feed nvd
Views 1
🇸🇦 Saudi Risk Score
6.2
/ 10.0 — Saudi Risk
Priority: HIGH
🏷️ Tags
patch-available CWE-416
Share this CVE

💬 Comments

0
Loading comments
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.