CVE-2026-97424

Received Received - Intake

AMDGPU RAS Suspend Callback Fix for cp_ecc_error_irq

Publication date: 2026-09-24

Last updated on: 2026-09-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq cp_ecc_error_irq is acquired in amdgpu_gfx_ras_late_init() but released in gfx_v9_0_hw_fini(), so the put site has to query amdgpu_irq_enabled() because the get is skipped on SR-IOV VF. ras_late_init / ras_fini have no suspend counterpart, so move the put to amdgpu_gfx_ras_suspend() / amdgpu_gfx_ras_fini() and add a matching ras_suspend callback that is invoked from amdgpu_ras_suspend() before disable_all_features(). The get and put now sit in the same place and check the same condition (not VF, funcs registered), no refcount querying needed. An active flag gates ras_fini so the suspend-then-unload-without-resume path falls into amdgpu_ras_block_late_fini_default() instead of double-releasing what ras_suspend already cleaned up. Drop the cp_ecc_error_irq put from gfx_v9_0_hw_fini(). gfx_v8_0 manages cp_ecc_error_irq locally and is unaffected; no other GFX generation has this IRQ.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-25

Generated

2026-10-15

AI Q&A

2026-09-24

EPSS Evaluated

2026-10-13

NVD

CVE-2026-97424

EUVD

EUVD-2026-86037

Affected Vendors & Products

Vendor	Product	Version / Range
amdgpu	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves a missing suspend callback in the Linux kernel's AMD GPU RAS (Reliability, Availability, and Serviceability) component. The issue occurs because the cp_ecc_error_irq resource is acquired during initialization but released during hardware finalization. On SR-IOV virtual functions (VF), the get operation is skipped, leading to a potential resource leak or improper handling during suspend/resume cycles.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver (amdgpu) and involves improper handling of RAS (Reliability, Availability, and Serviceability) callbacks during suspend operations. Detection requires checking kernel logs for AMD GPU-related errors or examining the driver's suspend/resume behavior. No direct network detection commands are applicable.

Impact Analysis

This vulnerability may cause system instability or crashes during suspend/resume operations on systems using AMD GPUs with SR-IOV virtual functions. It could lead to resource leaks, improper error handling, or unexpected behavior in graphics operations.

Mitigation Strategies

Update the Linux kernel to the patched version that includes the fix for this AMDGPU RAS vulnerability. Check your distribution's security advisories for the specific kernel version addressing CVE-2026-97424.

Hi! I’m here to help you understand CVE-2026-97424. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70