CVE-2026-97498
Received Received - Intake

AMDGPU Kernel Memory Corruption via Eviction

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction mqd and fw objects are queue core objects which should remain valid and never be unmapped and evicted for user queues to work properly. During eviction if these buffers are evicted the hw continue to use the invalid addresses and caused page faults and system hung.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97498
EUVD
EUVD-2026-86096

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the AMD GPU driver where mqd and fw objects, which manage GPU queues, are not properly pinned during eviction. This can lead to these objects being unmapped or evicted, causing the hardware to use invalid memory addresses. As a result, the system may experience page faults and potentially hang.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver and may not have direct network detection methods. Monitor for system hangs or page faults related to GPU operations. Check kernel logs for AMD GPU errors using 'dmesg | grep -i amdgpu' or 'journalctl -k | grep -i amdgpu'.

Impact Analysis

If exploited, this vulnerability could cause system instability, including crashes or freezes, particularly when using AMD GPUs. Users relying on GPU-intensive applications may face disruptions or data loss due to unexpected system hangs.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. If using a distribution-specific kernel, apply the vendor's patch immediately. Reboot the system after updating to ensure the changes take effect.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97498. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart