🟠 High | Source: Microsoft Security Response Center
CVE-2026-63879 is a vulnerability in the Linux kernel’s DRM/AMDGPU driver, specifically within the amdgpu_hmm_range_get_pages function, which handles GPU memory management. Microsoft has published this advisory in the context of Azure, likely affecting Linux virtual machines running AMD GPU workloads. If exploited, this type of kernel-level flaw can potentially allow an attacker to cause memory corruption, a system crash, or privilege escalation within an affected VM.
Security Architect’s Take: Review your Azure Linux VM fleet — particularly any GPU-accelerated instances (NC/NV series) using AMD GPUs — and ensure the underlying Linux kernel packages are patched to a version that includes the fix for this DRM/AMDGPU issue. Prioritise patching workloads where untrusted code executes on GPU-enabled VMs, such as AI/ML inference environments.
Original advisory: CVE-2026-63879 drm/amdgpu: fix amdgpu_hmm_range_get_pages