{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"16e7e7ad8cdc6b4c4af7f31e262f1494c1b2a55e","status":"affected","version":"b194d21b9bcc15b50df1bc3ff7428e51c2918a6f","versionType":"git"},{"lessThan":"9ae85b0c1909b6c6bfd2636b04cdaf7f520bf2b5","status":"affected","version":"b194d21b9bcc15b50df1bc3ff7428e51c2918a6f","versionType":"git"},{"lessThan":"f441538893eba6347b983f2904819ca6c99da65e","status":"affected","version":"b194d21b9bcc15b50df1bc3ff7428e51c2918a6f","versionType":"git"},{"lessThan":"0c44d61945c4a80775292d96460aa2f22e62f86c","status":"affected","version":"b194d21b9bcc15b50df1bc3ff7428e51c2918a6f","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.11"},{"lessThan":"6.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.14","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-45853","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()\n\namdgpu_discovery_get_nps_info() internally allocates memory for ranges\nusing kvcalloc(), which may use vmalloc() for large allocation. Using\nkfree() to release vmalloc memory will lead to a memory corruption.\n\nUse kvfree() to safely handle both kmalloc and vmalloc allocations.\n\nCompile tested only. Issue found using a prototype static analysis tool\nand code review.","epss":{"date":"2026-11-06","percentile":0.05664,"score":0.00164},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793979780207,"publishedAt":1779884127453,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/16e7e7ad8cdc6b4c4af7f31e262f1494c1b2a55e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/9ae85b0c1909b6c6bfd2636b04cdaf7f520bf2b5"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/f441538893eba6347b983f2904819ca6c99da65e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0c44d61945c4a80775292d96460aa2f22e62f86c"}],"remediation":[],"revision":"6cc124e7e1ca58a72e62fdc75188c032965213820721c7418feee34ec1be5d38","sources":[{"modifiedAt":1793979780207,"name":"CNA: Linux","retrievedAt":1793981750397,"url":"https://www.cve.org/CVERecord?id=CVE-2026-45853"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793981758529,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-45853"}],"ssvc":{"assessedAt":1793979759256,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memranges()","updatedAt":1793981758529}