CVE-2026-98389

Received Received - Intake

Race Condition in AMDGPU GPU Reset Handling

Publication date: 2026-10-14

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_power_profile during GPU reset During resume from GPU reset, the gfx idle work may invoke switch_power_profile before the reset completes. This causes the following assert error because the register access occurs without first releasing the GPU reset semaphore: [ 1576.768935] CR2: 0000559ea133ead0 CR3: 00000002e6c42000 CR4: 0000000000350ef0 [ 1576.768940] Call Trace: [ 1576.768944] <TASK> [ 1576.768953] amdgpu_device_rreg+0x21/0x50 [amdgpu] [ 1576.769158] smu_msg_v1_send_msg+0x1a4/0x6e0 [amdgpu] [ 1576.769437] smu_cmn_send_smc_msg_with_params_ext+0xba/0x120 [amdgpu] [ 1576.769721] smu_cmn_send_smc_msg_with_param+0x33/0x40 [amdgpu] [ 1576.769993] smu_v13_0_0_set_power_profile_mode+0x192/0x2b0 [amdgpu] [ 1576.770267] smu_bump_power_profile_mode+0x5d/0x80 [amdgpu] [ 1576.770538] smu_switch_power_profile+0xa4/0xf0 [amdgpu] [ 1576.770839] amdgpu_dpm_switch_power_profile+0x6f/0x90 [amdgpu] [ 1576.771210] amdgpu_gfx_profile_idle_work_handler+0xe9/0x130 [amdgpu] [ 1576.771460] process_one_work+0x23e/0x6f0 [ 1576.771491] worker_thread+0x1c4/0x380 [ 1576.771506] kthread+0x10c/0x150 [ 1576.771512] ? __pfx_worker_thread+0x10/0x10 [ 1576.771518] ? __pfx_kthread+0x10/0x10 [ 1576.771530] ret_from_fork+0x314/0x390 [ 1576.771537] ? __pfx_kthread+0x10/0x10 [ 1576.771546] ret_from_fork_asm+0x1a/0x30 (cherry picked from commit d93b1ff538ce9750c01e0dd0aa62575579c0fc08)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98389

EUVD

EUVD-2026-101038

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Linux	Linux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Linux	Linux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Linux	Linux	0
Linux	Linux	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a race condition during GPU reset recovery in AMDGPU drivers. When resuming from a GPU reset, the graphics idle work may attempt to switch power profiles before the reset completes. This causes a register access error due to the GPU reset semaphore not being released first, leading to an assert failure.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver and manifests during GPU reset operations. Detection requires checking kernel logs for the described error pattern during GPU operations or resets. Monitor for the assert error in dmesg output, particularly around amdgpu and gfx idle work handler messages.

Impact Analysis

This vulnerability could cause system instability or crashes during GPU operations, particularly when recovering from GPU resets. Users may experience graphical glitches, application freezes, or system hangs when using AMD GPUs with affected Linux kernel versions.

Compliance Impact

This vulnerability is specific to the Linux kernel's AMD GPU driver and does not directly impact compliance with standards like GDPR or HIPAA. It involves a GPU reset issue causing system instability but does not relate to data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for this vulnerability. The specific patch is identified as commit d93b1ff538ce9750c01e0dd0aa62575579c0fc08.

Hi! I’m here to help you understand CVE-2026-98389. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70