CVE-2026-80618

Published Aug 28, 2026

Overview

CVE-2026-80618 is a known-severity vulnerability. It was published on August 28, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free

amdgpu_amdkfd_gpuvm_free_memory_of_gpu() unpinned DOORBELL and MMIO

remap BOs (which are pinned at allocation time) before checking whether

the BO is still mapped to the GPU. When the BO is still mapped, the

function returns -EBUSY and leaves the BO alive, but it has already

been unpinned. The BO is then unpinned again when it is finally freed

during process teardown, triggering a ttm_bo_unpin() underflow warning:

WARNING: CPU: 18 PID: 15066 at ttm/ttm_bo.c:650 amdttm_bo_unpin+0x6d/0x80 [amdttm]

Workqueue: kfd_process_wq kfd_process_wq_release [amdgpu]

RIP: 0010:amdttm_bo_unpin+0x6d/0x80 [amdttm]

Call Trace:

amdgpu_bo_unpin+0x1a/0x90 [amdgpu]

amdgpu_amdkfd_gpuvm_unpin_bo+0x31/0xb0 [amdgpu]

amdgpu_amdkfd_gpuvm_free_memory_of_gpu+0x3bf/0x460 [amdgpu]

kfd_process_free_outstanding_kfd_bos+0xd4/0x170 [amdgpu]

kfd_process_wq_release+0x109/0

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/0e27d92f69b8e4c750a4b181cc05a86b9338c4f5 Ref git.kernel.org/stable/c/1d12ae8b079e173107abec0e5817332954c8e95f Ref git.kernel.org/stable/c/283e77af49fda96aaa57709fc5408b55ffec075e Ref git.kernel.org/stable/c/3f0cc1735273a57c5116710cf0202e12152f59cc Ref git.kernel.org/stable/c/461ae406ae12107ebb321cabe561434c27aaea58 Ref git.kernel.org/stable/c/c055a2088b719e9a4b580685e0ca97f9554a41a8

Frequently Asked Questions

What is CVE-2026-80618?

CVE-2026-80618 is a known-severity vulnerability. It was published on August 28, 2026.

How severe is CVE-2026-80618?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2026-80618?

How can CyberStrike help with CVE-2026-80618?

CyberStrike's AI-powered security agents can automatically detect CVE-2026-80618 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.